Fix bug 950885 - Only send standard CSP header

mozilla · Dec 16, 2013 · 4712d88 · 4712d88
1 parent e071d29
commit 4712d88
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/app.js b/app.js
@@ -27,6 +27,9 @@ server.use(helmet.iexss());
 server.use(helmet.contentTypeOptions());
 
 server.use(hood.csp({
+  headers: [
+    "Content-Security-Policy"
+  ],
   policy: {
     'default-src': ["'self'"],
     'frame-src': ["https://login.persona.org"],

diff --git a/package.json b/package.json
@@ -7,7 +7,7 @@
     "express": "3.2.0",
     "habitat": "0.4.2",
     "helmet": "0.1.2",
-    "hood": "0.1.2",
+    "hood": "0.2.1",
     "knox": "0.8.6",
     "makeapi-client": "https://github.com/mozilla/makeapi-client/tarball/v0.5.12",
     "messina": "0.1.1",