update helmet policy

2026-01-06 09:49:39 -06:00 · 2025-05-22 11:20:11 -07:00
parent ba703ac377
commit dd93b9f36b
1 changed files with 6 additions and 0 deletions
--- a/server/index.js
+++ b/server/index.js
@@ -324,6 +324,12 @@ const startApp = async () => {
 	app.use(
 		helmet({
 			hsts: false,
+			contentSecurityPolicy: {
+				useDefaults: true,
+				directives: {
+					upgradeInsecureRequests: null,
+				},
+			},
 		})
 	);
 	app.use(