github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-01 07:47:56 +00:00
Code Issues Projects Releases Wiki Activity

Add 'X-Content-Type-Options: nosniff" to some error messages

Browse Source
This commit is contained in:
Brendan Burns 2016-11-20 22:27:31 -08:00
parent 9eb82fadc4
commit 43251c92e1
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkg/apiserver/filters/errors.go Executable file → Normal file
View File

@ -26,6 +26,8 @@ import (
// badGatewayError renders a simple bad gateway error. // badGatewayError renders a simple bad gateway error.
func badGatewayError(w http.ResponseWriter, req *http.Request) { func badGatewayError(w http.ResponseWriter, req *http.Request) {
w.Header().Set("Content-Type", "text/plain")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.WriteHeader(http.StatusBadGateway) w.WriteHeader(http.StatusBadGateway)
fmt.Fprintf(w, "Bad Gateway: %#v", req.RequestURI) fmt.Fprintf(w, "Bad Gateway: %#v", req.RequestURI)
} }
@ -33,6 +35,8 @@ func badGatewayError(w http.ResponseWriter, req *http.Request) {
// forbidden renders a simple forbidden error // forbidden renders a simple forbidden error
func forbidden(attributes authorizer.Attributes, w http.ResponseWriter, req *http.Request, reason string) { func forbidden(attributes authorizer.Attributes, w http.ResponseWriter, req *http.Request, reason string) {
msg := forbiddenMessage(attributes) msg := forbiddenMessage(attributes)
w.Header().Set("Content-Type", "text/plain")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.WriteHeader(http.StatusForbidden) w.WriteHeader(http.StatusForbidden)
fmt.Fprintf(w, "%s: %q", msg, reason) fmt.Fprintf(w, "%s: %q", msg, reason)
} }
@ -57,6 +61,8 @@ func forbiddenMessage(attributes authorizer.Attributes) string {
// internalError renders a simple internal error // internalError renders a simple internal error
func internalError(w http.ResponseWriter, req *http.Request, err error) { func internalError(w http.ResponseWriter, req *http.Request, err error) {
w.Header().Set("Content-Type", "text/plain")
w.Header().Set("X-Content-Type-Options", "nosniff")
w.WriteHeader(http.StatusInternalServerError) w.WriteHeader(http.StatusInternalServerError)
fmt.Fprintf(w, "Internal Server Error: %#v", req.RequestURI) fmt.Fprintf(w, "Internal Server Error: %#v", req.RequestURI)
runtime.HandleError(err) runtime.HandleError(err)