block iframe

2022-04-12 19:36:14 +10:00 · 2022-04-12 19:36:14 +10:00 · a7fc9c4b24
parent ee9e27ecad
commit a7fc9c4b24
1 changed files with 1 additions and 0 deletions
--- a/src/router.js
+++ b/src/router.js
@ -3,6 +3,7 @@ const router = require('express').Router()

 // Add CORS headers
 router.use((req, res, next) => {
+  res.header('X-Frame-Options', 'DENY')
  res.header('Access-Control-Allow-Origin', '*')
  res.header('Access-Control-Allow-Headers', 'Origin, X-Requested-With, Content-Type, Accept')
  next()