mirror of
https://github.com/versia-pub/server.git
synced 2025-12-06 16:38:19 +01:00
fix: 🐛 Only apply security headers to /api/*
This commit is contained in:
parent
f3dd229dcb
commit
5f0ef971f4
1
app.ts
1
app.ts
|
|
@ -41,6 +41,7 @@ export const appFactory = async () => {
|
||||||
app.use(logger);
|
app.use(logger);
|
||||||
app.use(boundaryCheck);
|
app.use(boundaryCheck);
|
||||||
app.use(
|
app.use(
|
||||||
|
"/api/*",
|
||||||
secureHeaders({
|
secureHeaders({
|
||||||
contentSecurityPolicy: {
|
contentSecurityPolicy: {
|
||||||
// We will not be returning HTML, so everything should be blocked
|
// We will not be returning HTML, so everything should be blocked
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue