middlewares/helmet.js


1
2
3
4
5
6
7
8
9
10
11
12

import helmet from "helmet";

const myHelmet = helmet({
	contentSecurityPolicy: {
		directives: {
			...helmet.contentSecurityPolicy.getDefaultDirectives(),
			"script-src": ["'self'", "'unsafe-inline'"],
		},
	},
});

export default myHelmet;