Merge pull request #2785 from khassel/helmet-fix

This commit is contained in:
Michael Teeuw 2022-01-14 07:09:30 +01:00 committed by GitHub
commit aafeb1e875
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions

View File

@ -18,7 +18,7 @@ _This release is scheduled to be released on 2022-04-01._
### Updated ### Updated
- deprecated roboto fonts package `roboto-fontface-bower` replaced with `fontsource`. - deprecated roboto fonts package `roboto-fontface-bower` replaced with `fontsource`.
- update `helmet` to v5. - update `helmet` to v5, use defaults of v4.
- updates Font Awesome css class to new default style (fixes #2768) - updates Font Awesome css class to new default style (fixes #2768)
### Fixed ### Fixed

View File

@ -67,7 +67,7 @@ function Server(config, callback) {
res.status(403).send("This device is not allowed to access your mirror. <br> Please check your config.js or config.js.sample to change this."); res.status(403).send("This device is not allowed to access your mirror. <br> Please check your config.js or config.js.sample to change this.");
}); });
}); });
app.use(helmet({ contentSecurityPolicy: false, crossOriginOpenerPolicy: false })); app.use(helmet({ contentSecurityPolicy: false, crossOriginOpenerPolicy: false, crossOriginEmbedderPolicy: false, crossOriginResourcePolicy: false, originAgentCluster: false }));
app.use("/js", express.static(__dirname)); app.use("/js", express.static(__dirname));