Update server.js

2026-01-24 00:14:05 +01:00 · 2026-01-24 00:14:05 +01:00 · bb7b2328ab
commit bb7b2328ab
parent b6ad724602
1 changed files with 2 additions and 0 deletions
--- a/server.js
+++ b/server.js
@ -22,6 +22,8 @@ certificates.setupKeys()

 app.use(hpp())
 app.use(helmet({
+    crossOriginResourcePolicy: { policy: "cross-origin" },
+    crossOriginEmbedderPolicy: false,
    contentSecurityPolicy: {
        directives: {
            defaultSrc: ["'self'"],