Erik Michelson 74daa0e7a1 fix(security): headers were not applied to uploads ...

Due to express static overriding the response, applying the extra headers
like CSP and Content-Disposition did not work for files served under the
/uploads route. By reordering, the code this works now.

Signed-off-by: Erik Michelson <github@erik.michelson.eu>

2026-02-04 20:27:41 +01:00

12 KiB

Raw Blame History

View Raw