mirrors/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-05-12 22:26:08 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(deps): update dependency helmet to v8

Browse source 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
This commit is contained in:
renovate[bot] 2025-02-01 20:14:52 +00:00 • committed by Erik Michelson
parent 41e411301c
commit 6226fe6225
3 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
app.js
View file

@ -126,7 +126,8 @@ app.use(csp.addNonceToLocals)
// https://helmetjs.github.io/docs/csp/
if (config.csp.enable) {
app.use(helmet.contentSecurityPolicy({
directives: csp.computeDirectives()
directives: csp.computeDirectives(),
useDefaults: false
}))
} else {
logger.info('Content-Security-Policy is disabled. This may be a security risk.')