Add Content Security Policy and HSTS default headers

cds-snc / ircc-rescheduler

🙅🗓

https://vancouver.rescheduler-dev.cds-snc.ca/

MIT License

24 stars 7 forks source link

Closed pcraig3 closed 5 years ago

pcraig3 commented 5 years ago

Updated default headers with:

And removed the noCache header as I don't think we need it.

Read more here:

obrien-j commented 5 years ago

Looks good. The helmet magic is cool.