Files
impost/example-app/server/middleware/secure-context.ts
Zoe cfab3d0b8f Initial commit
Once again a weird place to commit, I have already done a lot of work, but I am just bad at using git, okay.
2025-11-17 16:12:26 +00:00

10 lines
554 B
TypeScript

import { defineEventHandler, setHeader } from 'h3'; // H3 is the underlying HTTP framework in Nuxt 3
export default defineEventHandler((event) => {
setHeader(event, 'Strict-Transport-Security', 'max-age=63072000; includeSubDomains; preload');
setHeader(event, 'X-Frame-Options', 'DENY');
setHeader(event, 'X-XSS-Protection', '1; mode=block');
setHeader(event, 'Cross-Origin-Opener-Policy', 'same-origin');
setHeader(event, 'Cross-Origin-Embedder-Policy', 'require-corp');
setHeader(event, 'access-control-allow-origin', '*');
});