// backend/http-functions.js import { ok, response } from 'wix-http-functions'; export function get_mySecureEndpoint(request) { let headers = { "Content-Security-Policy": "default-src 'self'", "X-Frame-Options": "DENY", "X-Content-Type-Options": "nosniff", "Strict-Transport-Security": "max-age=31536000; includeSubDomains", "Referrer-Policy": "no-referrer-when-downgrade", "Permissions-Policy": "geolocation=(), microphone=(), camera=()" }; return response({ status: 200, headers, body: { "message": "Secure headers applied to this endpoint." } }); }

top of page