diff --git a/vendor/github.com/gorilla/rpc/v2/server.go b/vendor/github.com/gorilla/rpc/v2/server.go index bd0a42db4..bdf140106 100644 --- a/vendor/github.com/gorilla/rpc/v2/server.go +++ b/vendor/github.com/gorilla/rpc/v2/server.go @@ -149,6 +149,11 @@ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request) { // Prevents Internet Explorer from MIME-sniffing a response away // from the declared content-type w.Header().Set("x-content-type-options", "nosniff") + // Prevents against XSS Atacks + w.Header().Set("X-XSS-Protection", "\"1; mode=block\"") + // Prevents against Clickjacking + w.Header().Set("X-Frame-Options", "SAMEORIGIN") + // Encode the response. if errResult == nil { codecReq.WriteResponse(w, reply.Interface())