Enable helmet

package.json

@@ -18,6 +18,7 @@
     "@fastify/cookie": "^8.0.0",
     "@fastify/cors": "^8.0.0",
     "@fastify/env": "^4.0.0",
+    "@fastify/helmet": "^10.0.0",
     "@fastify/jwt": "^6.1.0",
     "@fastify/postgres": "^5.0.0",
     "@fastify/rate-limit": "^7.0.0",

plugins/helmet.js

@@ -0,0 +1,21 @@
+import fp from 'fastify-plugin'
+
+/**
+ * This plugins adds fastify/fastify-helmet
+ *
+ * @see https://github.com/fastify/fastify-helmet
+ */
+export default fp(async function (fastify, opts) {
+  fastify.register(import('@fastify/helmet'), fastify.config.ENV === 'production'
+    ? null
+    : {
+        contentSecurityPolicy: {
+          directives: {
+            'upgrade-insecure-requests': null
+          }
+        }
+      })
+}, {
+  name: 'helmet',
+  dependencies: ['env']
+})

web/components/episode-title/index.js

@@ -6,7 +6,6 @@ export const episodeTitle = Component(({
   episode: e,
   small
 } = {}) => {
-  console.log(e)
   const href = small === true
     ? `/episodes/?id=${e.id}`
     : e.url
@@ -38,7 +37,7 @@ export const episodeTitle = Component(({
               ? '💿'
               : null
         }
-        <a class="bc-episode-title" href="${href}" target="_blank">
+        <a class="bc-episode-title-text" href="${href}" target="_blank">
           ${e.display_title}
         </a>
       </div>