sasjs / server

Build Apps on Base SAS

https://server.sasjs.io

MIT License

20 stars 3 forks source link

Closed medjedovicm closed 2 years ago

medjedovicm commented 2 years ago

Implementation

Added .env option HELMET_CSP_CONFIG_PATH that will import the JSON config to HELMET contentSecurityPolicy directives
Added .env option HELMET_COEP that will be bassed to the HELMET config for crossOriginEmbedderPolicy

allanbowe commented 2 years ago

Per discussion, let's switch this to using a defined set of CSP directives and disable the "disable" option