photoprism/internal/server/header/security.go

package header

const (
	AccessControlAllowOrigin = "Access-Control-Allow-Origin" // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin
	ContentSecurityPolicy    = "Content-Security-Policy"     // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy
	StrictTransportSecurity  = "Strict-Transport-Security"   // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
	CrossOriginOpenerPolicy  = "Cross-Origin-Opener-Policy"  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cross-Origin-Opener-Policy
	ReferrerPolicy           = "Referrer-Policy"             // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
	ContentTypeOptions       = "X-Content-Type-Options"      // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
	XSSProtection            = "X-XSS-Protection"            // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
	FrameOptions             = "X-Frame-Options"             // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
	ForwardedProto           = "X-Forwarded-Proto"           // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
)