Fix IE sandbox stuff (see #44 and #49)

helmetjs · Jun 4, 2014 · 4d68a93 · 4d68a93
1 parent da9de69
commit 4d68a93
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/lib/middleware/csp.js b/lib/middleware/csp.js
@@ -88,7 +88,11 @@ module.exports = function csp(options) {
                 if (version >= 10) {
                     headers.push('X-Content-Security-Policy');
                     if (!setAllHeaders) {
-                        policy = { sandbox: policy.sandbox };
+                        if (policy.sandbox) {
+                            policy = { sandbox: policy.sandbox };
+                        } else {
+                            policy = {};
+                        }
                     }
                 }
                 break;