fix helmet, use defaults from v4

This commit is contained in:
Karsten Hassel 2022-01-14 00:05:08 +01:00
parent da8edbfdc1
commit 480c10b239
2 changed files with 2 additions and 2 deletions

View File

@ -18,7 +18,7 @@ _This release is scheduled to be released on 2022-04-01._
### Updated
- deprecated roboto fonts package `roboto-fontface-bower` replaced with `fontsource`.
- update `helmet` to v5.
- update `helmet` to v5, use defaults of v4.
- updates Font Awesome css class to new default style (fixes #2768)
### Fixed

View File

@ -67,7 +67,7 @@ function Server(config, callback) {
res.status(403).send("This device is not allowed to access your mirror. <br> Please check your config.js or config.js.sample to change this.");
});
});
app.use(helmet({ contentSecurityPolicy: false, crossOriginOpenerPolicy: false }));
app.use(helmet({ contentSecurityPolicy: false, crossOriginOpenerPolicy: false, crossOriginEmbedderPolicy: false, crossOriginResourcePolicy: false, originAgentCluster: false }));
app.use("/js", express.static(__dirname));