From 51860dd47514574836af50ebccc0b719f1c78cde Mon Sep 17 00:00:00 2001 From: Mike Crute Date: Tue, 26 Sep 2023 21:00:43 -0700 Subject: echo: add block-all-mixed-content to csp mw --- echo/middleware/csp.go | 1 + 1 file changed, 1 insertion(+) diff --git a/echo/middleware/csp.go b/echo/middleware/csp.go index 7ff4098..14047eb 100644 --- a/echo/middleware/csp.go +++ b/echo/middleware/csp.go @@ -33,6 +33,7 @@ type ContentSecurityPolicyConfig struct { Sandbox []CSPSandbox `csp:"sandbox"` FormAction []CSPDirective `csp:"form-action"` UpgradeInsecureRequests bool `csp:"upgrade-insecure-requests"` + BlockAllMixedContent bool `csp:"block-all-mixed-content"` FrameAncestors []CSPDirective `csp:"frame-ancestors"` ReportUri []*url.URL `csp:"report-uri"` // deprecated ReportTo []CSPReportTo `csp:"report-to"` // experimental -- cgit v1.2.3