diff --git a/imageproxy.go b/imageproxy.go index d738b76..0a363b8 100644 --- a/imageproxy.go +++ b/imageproxy.go @@ -257,7 +257,7 @@ func (p *Proxy) serveImage(w http.ResponseWriter, r *http.Request) { // Disable Content-Type sniffing w.Header().Set("X-Content-Type-Options", "nosniff") - + // Block potential XSS attacks especially in legacy browsers which do not support CSP w.Header().Set("X-XSS-Protection", "1; mode=block")