github/podinfo
1
0
Fork 0
mirror of https://github.com/stefanprodan/podinfo.git synced 2026-05-23 09:52:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(echo): set Content-Type to prevent MIME-sniff XSS (CVE-2026-43644)

Browse Source 
Use tab indentation to match gofmt.

Signed-off-by: Niccolò Parlanti <54103711+Niccolo10@users.noreply.github.com>
This commit is contained in:
Niccolò Parlanti
2026-05-15 12:04:27 +02:00
parent 9f4969c2c8
commit b65271f0d9
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
pkg/api/http/echo.go
View File

@@ -102,6 +102,9 @@ func (s *Server) echoHandler(w http.ResponseWriter, r *http.Request) {
s.JSONResponse(w, r, result)
} else {
w.Header().Set("Content-Type", "application/octet-stream")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.Header().Set("Content-Security-Policy", "default-src 'none'")
w.Header().Set("X-Color", s.config.UIColor)
w.WriteHeader(http.StatusAccepted)
w.Write(body)