RochoElLocho/EK-Suche-GO
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sicherheits header gesetzt

Browse Source
This commit is contained in:
Domenik Rath 2025-01-12 18:27:33 +01:00
parent 299cadb278
commit aed8f6f856
1 changed files with 26 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
main.go
View File

@ -21,19 +21,38 @@ func main() {
} }
// Set up routes // Set up routes
http.HandleFunc("/", handleRoot) mux := http.NewServeMux()
http.HandleFunc("/config", handleConfig) mux.HandleFunc("/", handleRoot)
http.HandleFunc("/popup", handlePopupInstructions) mux.HandleFunc("/config", handleConfig)
http.HandleFunc("/search", handleSearch) mux.HandleFunc("/popup", handlePopupInstructions)
http.HandleFunc("/favicon.ico", handleFavicon) mux.HandleFunc("/search", handleSearch)
mux.HandleFunc("/favicon.ico", handleFavicon)
// Serve static files from 'public' directory // Serve static files from 'public' directory
fs := http.FileServer(http.Dir("./public")) fs := http.FileServer(http.Dir("./public"))
http.Handle("/public/", http.StripPrefix("/public/", fs)) mux.Handle("/public/", http.StripPrefix("/public/", fs))
// Wende die Sicherheitsheader-Middleware auf alle Routen an
secureMux := secureHeaders(mux)
// Start the server // Start the server
log.Printf("Server is running at http://0.0.0.0:%s\n", port) log.Printf("Server is running at http://0.0.0.0:%s\n", port)
log.Fatal(http.ListenAndServe("0.0.0.0:"+port, nil)) log.Fatal(http.ListenAndServe("0.0.0.0:"+port, secureMux))
}
// Middleware für Sicherheitsheader
func secureHeaders(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
// Setze die Sicherheitsheader
w.Header().Set("Content-Security-Policy", "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:;")
w.Header().Set("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("X-Frame-Options", "DENY")
w.Header().Set("X-XSS-Protection", "1; mode=block")
// Führe den nächsten Handler aus
next.ServeHTTP(w, r)
})
} }
func handleRoot(w http.ResponseWriter, r *http.Request) { func handleRoot(w http.ResponseWriter, r *http.Request) {