fix: relax default helmet policy to allow cross origin

agrc · Jul 5, 2024 · 3d81d6a · 3d81d6a
1 parent 44ca4fe
commit 3d81d6a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/index.js b/index.js
@@ -17,7 +17,11 @@ if (!process.env.OPEN_QUAD_WORD) {
 
 let app = express();
 
-app.use(helmet());
+app.use(
+  helmet({
+    crossOriginResourcePolicy: { policy: 'cross-origin' },
+  }),
+);
 app.use(cors());
 
 // required for parsing submitted form data