Füge Security-Header hinzu
Das 'unsafe-inline' in der Content-Security-Policy wäre lieber nicht da, aber dazu müsste man erst die Templates umbauen.
This commit is contained in:
parent
329af2cf54
commit
8603087ed5
5 changed files with 15 additions and 0 deletions
|
@ -10,10 +10,12 @@ import (
|
|||
)
|
||||
|
||||
func (b *BaseHandler) RootHandler(w http.ResponseWriter, req *http.Request) {
|
||||
SendSecurityHeaders(w, req)
|
||||
b.writeTimetablePage(w, req, template.HTML(""))
|
||||
}
|
||||
|
||||
func (b *BaseHandler) GetByRoomHandler(w http.ResponseWriter, req *http.Request) {
|
||||
SendSecurityHeaders(w, req)
|
||||
roomId, _ := strconv.Atoi(req.FormValue("raum"))
|
||||
room, err := b.roomRepo.FindById(roomId)
|
||||
if err != nil {
|
||||
|
@ -29,6 +31,7 @@ func (b *BaseHandler) GetByRoomHandler(w http.ResponseWriter, req *http.Request)
|
|||
}
|
||||
|
||||
func (b *BaseHandler) GetByCourseHandler(w http.ResponseWriter, req *http.Request) {
|
||||
SendSecurityHeaders(w, req)
|
||||
courseid, err := strconv.Atoi(req.FormValue("veranstaltung"))
|
||||
if err != nil {
|
||||
b.RootHandler(w, req)
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue