Update server.js

server.js

@@ -21,7 +21,18 @@ databaseGlobals.setupDatabase()
 certificates.setupKeys()
 
 app.use(hpp())
-app.use(helmet())
+app.use(helmet({
+    contentSecurityPolicy: {
+        directives: {
+            defaultSrc: ["'self'"],
+            scriptSrc: ["'self'", "https://cdnjs.cloudflare.com", "'unsafe-inline'"],
+            styleSrc: ["'self'", "'unsafe-inline'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com"],
+            fontSrc: ["'self'", "https://cdn.jsdelivr.net", "https://cdnjs.cloudflare.com"],
+            connectSrc: ["'self'", "https://yggdrasil.azures.fr"],
+            imgSrc: ["'self'", "data:"],
+        },
+    }
+}))
 app.use(cors({ origin: "*" }))
 
 app.use(express.json())