fix: 🐛 Only apply security headers to /api/*

This commit is contained in:
Jesse Wierzbinski 2024-08-19 21:26:13 +02:00 committed by April John
parent 87b8c2bebe
commit ed22da15df

1
app.ts
View file

@ -41,6 +41,7 @@ export const appFactory = async () => {
app.use(logger);
app.use(boundaryCheck);
app.use(
"/api/*",
secureHeaders({
contentSecurityPolicy: {
// We will not be returning HTML, so everything should be blocked