Hacker News Reader

Congrats for doing this!

Regarding this:

> There should be no problems with running on a publicly-accessible server [...]

Looking at the https://github.com/jarmo/secrets-web source code, I don't see any place where it sets the `Content-Security-Policy` header. Or am I missing something?

View on HN

All security headers were supposed to be added by gin-contrib/secure middleware (https://github.com/gin-contrib/secure). However, your comment made me verify that it actually works as it was doing at the time of starting to use that. I noticed that headers were not present - it seems that somehow the order of registering middlewares had made it not work. I've released a new version where they all work https://github.com/jarmo/secrets-web/releases/tag/v1.0.1

Thanks for making me look into it and finding out about this problem.

Reply on news.ycombinator.com