Don't always force override headers

This commit is contained in:
Jade Ellis 2024-07-23 23:14:29 +01:00
parent 555990a5ad
commit 861d682383
No known key found for this signature in database
GPG key ID: 8705A2A3EBF77BD2

View file

@ -17,7 +17,11 @@ const securityHeaders = {
export const handle: Handle = async ({ event, resolve }) => {
const response = await resolve(event);
Object.entries(securityHeaders).forEach(
([header, value]) => response.headers.set(header, value)
([header, value]) => {
if (!response.headers.has(header)) {
response.headers.set(header, value)
}
}
);
response.headers.delete("x-sveltekit-page")