fix(deps): update dependency helmet to v8

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Erik Michelson <github@erik.michelson.eu>
2025-02-01 20:14:52 +00:00
parent 41e411301c
commit 6226fe6225
3 changed files with 8 additions and 7 deletions
--- a/app.js
+++ b/app.js
@@ -126,7 +126,8 @@ app.use(csp.addNonceToLocals)
 // https://helmetjs.github.io/docs/csp/
 if (config.csp.enable) {
  app.use(helmet.contentSecurityPolicy({
-    directives: csp.computeDirectives()
+    directives: csp.computeDirectives(),
+    useDefaults: false
  }))
 } else {
  logger.info('Content-Security-Policy is disabled. This may be a security risk.')