import helmet from "helmet"; const myHelmet = helmet({ contentSecurityPolicy: { directives: { ...helmet.contentSecurityPolicy.getDefaultDirectives(), "script-src": ["'self'", "'unsafe-inline'"], }, }, }); export default myHelmet;