diff options
| author | Omar Roth <omarroth@protonmail.com> | 2019-05-10 16:48:38 -0500 |
|---|---|---|
| committer | Omar Roth <omarroth@protonmail.com> | 2019-05-10 16:48:38 -0500 |
| commit | 7cd66e20d0529b9bab07fd77849cbfae225e7a4d (patch) | |
| tree | 49b8145ff6ad705ec904def35f9f2d8867373313 /src | |
| parent | d93df15effb30f4c6e6b0d2e006cd1ac2fa788ce (diff) | |
| download | invidious-7cd66e20d0529b9bab07fd77849cbfae225e7a4d.tar.gz invidious-7cd66e20d0529b9bab07fd77849cbfae225e7a4d.tar.bz2 invidious-7cd66e20d0529b9bab07fd77849cbfae225e7a4d.zip | |
Fix typo in X-XSS-Protection
Diffstat (limited to 'src')
| -rw-r--r-- | src/invidious.cr | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/invidious.cr b/src/invidious.cr index eb1b5104..31b8904e 100644 --- a/src/invidious.cr +++ b/src/invidious.cr @@ -188,7 +188,7 @@ proxies = PROXY_LIST before_all do |env| host_url = make_host_url(config, Kemal.config) - env.response.headers["X-XSS-Protection"] = "1; mode=block;" + env.response.headers["X-XSS-Protection"] = "1; mode=block" env.response.headers["X-Content-Type-Options"] = "nosniff" env.response.headers["Content-Security-Policy"] = "default-src blob: data: 'self' #{host_url} 'unsafe-inline' 'unsafe-eval'; media-src blob: 'self' #{host_url} https://*.googlevideo.com:443" env.response.headers["Referrer-Policy"] = "same-origin" |