fix: 🐛 Only apply security headers to /api/*

This commit is contained in:
Jesse Wierzbinski 2024-08-19 21:26:13 +02:00
parent f3dd229dcb
commit 5f0ef971f4
No known key found for this signature in database

1
app.ts
View file

@ -41,6 +41,7 @@ export const appFactory = async () => {
app.use(logger); app.use(logger);
app.use(boundaryCheck); app.use(boundaryCheck);
app.use( app.use(
"/api/*",
secureHeaders({ secureHeaders({
contentSecurityPolicy: { contentSecurityPolicy: {
// We will not be returning HTML, so everything should be blocked // We will not be returning HTML, so everything should be blocked