fix: 🐛 Only apply security headers to /api/*

This commit is contained in:
Jesse Wierzbinski 2024-08-19 21:26:13 +02:00
parent f3dd229dcb
commit 5f0ef971f4
No known key found for this signature in database

1
app.ts
View file

@ -41,6 +41,7 @@ export const appFactory = async () => {
app.use(logger);
app.use(boundaryCheck);
app.use(
"/api/*",
secureHeaders({
contentSecurityPolicy: {
// We will not be returning HTML, so everything should be blocked