Security: add temporary response header to see what kind of requests …

…… (#52726)
github · Oct 16, 2024 · 79269b5 · 79269b5
1 parent 6893804
commit 79269b5
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/frame/middleware/index.ts b/src/frame/middleware/index.ts
@@ -214,6 +214,12 @@ export default function (app: Express) {
   // *** Headers ***
   app.set('etag', false) // We will manage our own ETags if desired
 
+  // temporary
+  app.use(function (req, res, next) {
+    res.set('x-ptcl', req.secure ? 'o' : 'x')
+    next()
+  })
+
   // *** Config and context for redirects ***
   app.use(detectLanguage) // Must come before context, breadcrumbs, find-page, handle-errors, homepages
   app.use(asyncMiddleware(reloadTree)) // Must come before context