@@ -22,6 +22,8 @@ certificates.setupKeys()
app.use(hpp())
app.use(helmet({
crossOriginResourcePolicy: { policy: "cross-origin" },
crossOriginEmbedderPolicy: false,
contentSecurityPolicy: {
directives: {
defaultSrc: ["'self'"],
The note is not visible to the blocked user.