MCP Context Hub

import type { Request, Response, NextFunction } from 'express'; export function securityHeaders(_req: Request, res: Response, next: NextFunction): void { res.setHeader('X-Content-Type-Options', 'nosniff'); res.setHeader('X-Frame-Options', 'DENY'); res.setHeader('Referrer-Policy', 'strict-origin-when-cross-origin'); res.setHeader('X-XSS-Protection', '0'); res.setHeader( 'Content-Security-Policy', "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'" ); next(); }