chore(server.js): Add CSP support

The support is disabled by default, uncomment relevant lines to enable
it.

1 files changed, 3 insertions, 0 deletions

diff --git a/lib/nodeserver/server.js b/lib/nodeserver/server.js
index e9bdef5b..59765839 100644
--- a/lib/nodeserver/server.js
+++ b/lib/nodeserver/server.js
@@ -190,6 +190,9 @@ StaticServlet.prototype.sendFile_ = function(req, res, path) {
   var self = this;
   var file = fs.createReadStream(path);
   res.writeHead(200, {
+    // CSP headers, uncomment to enable CSP
+    //"X-WebKit-CSP": "default-src 'self';",
+    //"X-Content-Security-Policy": "default-src 'self'",
     'Content-Type': StaticServlet.
       MimeMap[path.split('.').pop()] || 'text/plain'
   });