fix(helmet): disable upgrade requests

2025-02-10 18:11:24 +01:00 · 2021-08-11 20:08:21 -05:00 · 2021-08-11 20:08:21 -05:00 · 519169884c
commit 519169884c
parent 2fd93046f0
1 changed files with 1 additions and 0 deletions
--- a/app.js
+++ b/app.js
@ -10,6 +10,7 @@ app.use(
      useDefaults: true,
      directives: {
        "img-src": '* data:', // this is needed to load images off site
+        upgradeInsecureRequests: undefined, // you should use SSL, this is disabled for internal use
      },
    })
  );