mirror of
https://github.com/Unleash/unleash.git
synced 2025-01-11 00:08:30 +01:00
a870c12138
Allow users to enable the helmet middleware to enable security headers by default. https://github.com/helmetjs/helmet
23 lines
561 B
JavaScript
23 lines
561 B
JavaScript
const helmet = require('helmet');
|
|
|
|
module.exports = function(config) {
|
|
if (config.enableHelmet) {
|
|
return helmet({
|
|
contentSecurityPolicy: {
|
|
directives: {
|
|
defaultSrc: [
|
|
"'self'",
|
|
'fonts.googleapis.com',
|
|
'fonts.gstatic.com',
|
|
'data:',
|
|
'gravatar.com',
|
|
],
|
|
},
|
|
},
|
|
});
|
|
}
|
|
return (req, res, next) => {
|
|
next();
|
|
};
|
|
};
|