From 2b61f4fc67838d26305e3f6621ac03b95f7ec4fb Mon Sep 17 00:00:00 2001 From: Timothy Stewart Date: Wed, 11 Aug 2021 20:11:49 -0500 Subject: [PATCH] fix(helmet): disable upgrade requests --- app.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app.js b/app.js index 9310a02..4c6c821 100644 --- a/app.js +++ b/app.js @@ -10,7 +10,7 @@ app.use( useDefaults: true, directives: { "img-src": '* data:', // this is needed to load images off site - upgradeInsecureRequests: undefined, // you should use SSL, this is disabled for internal use + upgradeInsecureRequests: [], // you should use SSL, this is disabled for internal use }, }) );