fix: remove default helmet

NodeBB · Aug 4, 2020 · c39c511 · c39c511
1 parent 8618c32
commit c39c511
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/src/webserver.js b/src/webserver.js
@@ -164,7 +164,6 @@ function setupExpressApp(app) {
 		saveUninitialized: nconf.get('sessionSaveUninitialized') || false,
 	}));
 
-	app.use(helmet());
 	app.use(helmet.referrerPolicy({ policy: 'strict-origin-when-cross-origin' }));
 	if (meta.config['hsts-enabled']) {
 		app.use(helmet.hsts({