David Mehren 0b61f48129 Fix upgradeInsecureRequests CSP directive ...

The `upgradeInsecureRequests` option of Helmets CSP middleware
was a boolean in Helmet 3, but with Helmet 4,
everything changed to lists.
This commit adjusts the addUpgradeUnsafeRequestsOptionTo
function accordingly.

Closes #1221

See also https://github.com/helmetjs/helmet/tree/v4.6.0/middlewares/content-security-policy

Signed-off-by: David Mehren <git@herrmehren.de>

2021-05-04 11:10:53 +02:00

3.5 KiB

Raw Blame History

View Raw