feat: add Cache-Control: private, no-store to all API routes per default (#1126)

This commit is contained in:
Elias Schneider
2025-11-30 18:29:35 +01:00
committed by GitHub
parent 14c7471b52
commit a25d6ef56c
3 changed files with 72 additions and 0 deletions

View File

@@ -63,6 +63,7 @@ func initRouterInternal(db *gorm.DB, svc *services) (utils.Service, error) {
rateLimitMiddleware := middleware.NewRateLimitMiddleware().Add(rate.Every(time.Second), 60)
// Setup global middleware
r.Use(middleware.NewCacheControlMiddleware().Add())
r.Use(middleware.NewCorsMiddleware().Add())
r.Use(middleware.NewCspMiddleware().Add())
r.Use(middleware.NewErrorHandlerMiddleware().Add())