fix: re-enable default helmet middleware

garrappachc · Jun 13, 2020 · ada5cf2 · ada5cf2
1 parent da4d7ce
commit ada5cf2
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/main.ts b/src/main.ts
@@ -17,11 +17,13 @@ async function bootstrap() {
   });
 
   app.enableCors();
-
+  app.use(helmet());
   app.use(helmet
     .contentSecurityPolicy({
       directives: {
-        defaultSrc: ['\'self\''],
+        defaultSrc: ['\'none\''],
+        baseUri: ['\'none\''],
+        formAction: ['\'none\''],
         scriptSrc: ['\'self\'', '\'unsafe-inline\''],
       },
     }),