fix: csp allow frame-src from adrianleung.dev

adriancleung · Sep 25, 2024 · a568b69 · a568b69
1 parent c37c36f
commit a568b69
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/src/index.ts b/src/index.ts
@@ -24,7 +24,15 @@ import users from './routes/user.routes';
 
 const app = express();
 
-app.use(helmet());
+app.use(
+  helmet({
+    contentSecurityPolicy: {
+      directives: {
+        frameSrc: ['self', 'adrianleung.dev'],
+      },
+    },
+  })
+);
 app.use(RATE_LIMITER);
 app.use(compression());
 app.use(cors(CORS_OPTIONS));