Avoid returning security related header when stating an object (#975)

minio · Apr 26, 2018 · c6108c4 · c6108c4
1 parent 92b6411
commit c6108c4
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/api-stat.go b/api-stat.go
@@ -66,6 +66,9 @@ var defaultFilterKeys = []string{
 	"x-amz-bucket-region",
 	"x-amz-request-id",
 	"x-amz-id-2",
+	"Content-Security-Policy",
+	"X-Xss-Protection",
+
 	// Add new headers to be ignored.
 }