rishi-raj-jain

const express = require('express')
const app = express()

app.use(express.json())
app.all('/api/some-route/:slug.json', (req, res) => {
  const slug = req.params.slug
  // some data fetching calls from the slug
  res.json({ data: 'data' })
})

rishi-raj-jain

<template>
  {{resp.some_data_key}}
</template>

<script>
export default {
  mounted() {
    // For a client side transition, fetch the page again to cache it on the edge 
    if (typeof window !== 'undefined') {
      fetch(`/some-route/${this.slug}`)

rishi-raj-jain

const { Router } = require("@layer0/core/router");

module.exports= new Router()
  .get("/", ({ setResponseHeader }) => {    
    setResponseHeader(
      "Permissions-Policy",
      "camera=(), microphone=(), geolocation=()"
    );
  })

rishi-raj-jain

const { Router } = require("@layer0/core/router");

module.exports= new Router()
  .get("/", ({ setResponseHeader }) => {
    setResponseHeader("Referrer-Policy", "origin-when-cross-origin");
  })

rishi-raj-jain

const { Router } = require("@layer0/core/router");

const ContentSecurityPolicy = `
  default-src 'self';
  script-src 'self' 'unsafe-eval' 'unsafe-inline' *.layer0.co;
  style-src 'self' 'unsafe-inline' *.googleapis.com;
  img-src * blob: data:;
  media-src 'none';
  connect-src *;
  font-src 'self' *.gstatic.com;

rishi-raj-jain

const { Router } = require('@layer0/core/router')

const ContentSecurityPolicy = `
  default-src 'self';
  script-src 'self' 'unsafe-eval' 'unsafe-inline' *.layer0.co;
  style-src 'self' 'unsafe-inline' *.googleapis.com;
  img-src * blob: data:;
  media-src 'none';
  connect-src *;
  font-src 'self' *.gstatic.com;

rishi-raj-jain

const { Router } = require('@layer0/core/router')

new Router()
  .get("/:route", ({ setResponseHeader }) => {
    setResponseHeader("X-Content-Type-Options", "nosniff")
  }
)

rishi-raj-jain

const { Router } = require('@layer0/core/router')

new Router()
  .get("/:route", ({ setResponseHeader }) => {
    setResponseHeader("X-Frame-Options", "SAMEORIGIN")
  }
)

rishi-raj-jain

const { Router } = require('@layer0/core/router')

new Router()
  .get("/:route", ({ setResponseHeader }) => {
    setResponseHeader("Cross-Origin-Resource-Policy", "same-origin")
  }
)

rishi-raj-jain

const { Router } = require('@layer0/core/router')

new Router()
  .get("/:route", ({ setResponseHeader }) => {
    setResponseHeader("Cross-Origin-Embedder-Policy", "require-corp")
  }
)