chore(server.js): Add CSP support

The support is disabled by default, uncomment relevant lines to enable it.
angular · Apr 28, 2012 · 2b1b257 · 2b1b257
1 parent 73caf76
commit 2b1b257
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/lib/nodeserver/server.js b/lib/nodeserver/server.js
@@ -190,6 +190,9 @@ StaticServlet.prototype.sendFile_ = function(req, res, path) {
   var self = this;
   var file = fs.createReadStream(path);
   res.writeHead(200, {
+    // CSP headers, uncomment to enable CSP
+    //"X-WebKit-CSP": "default-src 'self';",
+    //"X-Content-Security-Policy": "default-src 'self'",
     'Content-Type': StaticServlet.
       MimeMap[path.split('.').pop()] || 'text/plain'
   });