Archived
2

Merge pull request #26 in ~VLE2FE/definma-api from develop to master

* commit 'aa1f79168b37e2656a0ae9da0ccd2be8a53454df':
  another CSP fix
This commit is contained in:
Veit Lukas (PEA4-Fe) 2020-08-09 17:25:58 +02:00
commit d4c6dc82b7

View File

@ -56,7 +56,7 @@ app.use('/api-doc', helmet.contentSecurityPolicy({
}
}));
// special CSP header for the intro-presentation
app.use('/static/intro-presentation/$|index.html', helmet.contentSecurityPolicy({
app.use(/\/static\/intro-presentation\/(index.html)?/, helmet.contentSecurityPolicy({
...defaultHeaderConfig,
directives: {
defaultSrc: [`'none'`],