|
12345678910111213141516171819 |
- "use strict"
- Object.defineProperty(exports, "__esModule", { value: true })
- const ALLOWED_PERMITTED_POLICIES = new Set(["none", "master-only", "by-content-type", "all"])
- function getHeaderValueFromOptions({ permittedPolicies = "none" }) {
- if (ALLOWED_PERMITTED_POLICIES.has(permittedPolicies)) {
- return permittedPolicies
- } else {
- throw new Error(`X-Permitted-Cross-Domain-Policies does not support ${JSON.stringify(permittedPolicies)}`)
- }
- }
- function xPermittedCrossDomainPolicies(options = {}) {
- const headerValue = getHeaderValueFromOptions(options)
- return function xPermittedCrossDomainPoliciesMiddleware(_req, res, next) {
- res.setHeader("X-Permitted-Cross-Domain-Policies", headerValue)
- next()
- }
- }
- module.exports = xPermittedCrossDomainPolicies
- exports.default = xPermittedCrossDomainPolicies
|