wip

OpenTermsArchive · Jul 5, 2023 · 8f8f36e · 8f8f36e
1 parent 8edd417
commit 8f8f36e
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/api/server.js b/src/api/server.js
@@ -9,7 +9,12 @@ import apiRouter from './routes/index.js';
 
 const app = express();
 
-app.use(helmet());
+const cspDefaults = helmet.contentSecurityPolicy.getDefaultDirectives();
+
+delete cspDefaults['upgrade-insecure-requests'];
+
+app.use(helmet({ contentSecurityPolicy: { directives: cspDefaults } }));
+// app.use(helmet());
 
 if (process.env.NODE_ENV !== 'test') {
   app.use(loggerMiddleware);