14 lines
519 B
JavaScript
14 lines
519 B
JavaScript
export default defineNitroPlugin(nitroApp => {
|
|
nitroApp.hooks.hook('render:response', (response, { event }) => {
|
|
const routePath = event.node?.req?.url || event.node?.req?.originalUrl
|
|
// const routePath= event.context.params._
|
|
if (routePath && !routePath.startsWith('/forms/')) {
|
|
console.error('Not a form, setting X-Frame-Options', routePath)
|
|
// Only allow embedding of forms
|
|
response.headers['X-Frame-Options'] = 'sameorigin'
|
|
}
|
|
|
|
delete response.headers['x-powered-by']
|
|
})
|
|
})
|