25 lines
659 B
JavaScript
25 lines
659 B
JavaScript
const http = require('http')
|
|
|
|
const server = http.createServer((req, res) => {
|
|
secureHeaders(res)
|
|
switch (req.url) {
|
|
case '/': return res.end('hello world')
|
|
case '/users': return res.end('oh, some users!')
|
|
default: return error('404', res)
|
|
}
|
|
})
|
|
|
|
function secureHeaders (res) {
|
|
res.setHeader('X-DNS-Prefetch-Control', 'off')
|
|
res.setHeader('X-Frame-Options', 'SAMEORIGIN')
|
|
res.setHeader('X-Download-Options', 'noopen')
|
|
res.setHeader('X-Content-Type-Options', 'nosniff')
|
|
res.setHeader('X-XSS-Protection', '1; mode=block')
|
|
}
|
|
|
|
function error(code, res) {
|
|
res.statusCode = code
|
|
res.end(http.STATUS_CODES[code])
|
|
}
|
|
|
|
server.listen(3000) |