Update server.js

2026-01-19 20:37:12 +01:00 · 2026-01-19 20:37:12 +01:00 · 66db52e7c8
commit 66db52e7c8
parent 21fd655a1f
1 changed files with 12 additions and 1 deletions
--- a/server.js
+++ b/server.js
@ -21,7 +21,18 @@ databaseGlobals.setupDatabase()
 certificates.setupKeys()

 app.use(hpp())
-app.use(helmet())
+app.use(helmet({
+    contentSecurityPolicy: {
+        directives: {
+            defaultSrc: ["'self'"],
+            scriptSrc: ["'self'", "https://cdnjs.cloudflare.com", "'unsafe-inline'"],
+            styleSrc: ["'self'", "'unsafe-inline'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com"],
+            fontSrc: ["'self'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com"],
+            connectSrc: ["'self'", "https://yggdrasil.azures.fr"],
+            imgSrc: ["'self'", "data:"],
+        },
+    }
+}))
 app.use(cors({ origin: "*" }))

 app.use(express.json())