Improve the default redirect response headers

Author: dougwilson

HISTORY.md

@@ -2,6 +2,7 @@ unreleased
 ==========
 
   * Fix reading options from options prototype
+  * Improve the default redirect response headers
   * deps: [email protected]
   * deps: [email protected]
     - Allow Node.js HTTP server to set `Date` response header

index.js

@@ -90,13 +90,16 @@ function serveStatic(root, options) {
         originalUrl.pathname = collapseLeadingSlashes(originalUrl.pathname + '/')
 
         // reformat the URL
-        var target = url.format(originalUrl)
+        var loc = url.format(originalUrl)
+        var msg = 'Redirecting to <a href="' + escapeHtml(loc) + '">' + escapeHtml(loc) + '</a>\n'
 
         // send redirect response
         res.statusCode = 303
-        res.setHeader('Content-Type', 'text/html; charset=utf-8')
-        res.setHeader('Location', target)
-        res.end('Redirecting to <a href="' + escapeHtml(target) + '">' + escapeHtml(target) + '</a>\n')
+        res.setHeader('Content-Type', 'text/html; charset=UTF-8')
+        res.setHeader('Content-Length', Buffer.byteLength(msg))
+        res.setHeader('X-Content-Type-Options', 'nosniff')
+        res.setHeader('Location', loc)
+        res.end(msg)
       })
     } else {
       // forward to next middleware on directory