middlewares/helmet.js


1
2
3
4
5
6
7
8
9
10
11
12

import helmet from 'helmet';

const myHelmet = helmet({
	contentSecurityPolicy: {
		directives: {
			...helmet.contentSecurityPolicy.getDefaultDirectives(),
			'script-src': ['\'self\'', '\'unsafe-inline\''],
		},
	},
});

export default myHelmet;