diff options
| author | Chocobozzz <me@florianbigard.com> | 2021-04-12 15:33:54 +0200 |
|---|---|---|
| committer | Chocobozzz <me@florianbigard.com> | 2021-04-12 15:33:54 +0200 |
| commit | 8155db669baff9aac5617a7aaf68dd35823ed7c9 (patch) | |
| tree | 9a7575cd5d6bc9f4905d02c4a9aedd603ec2ec83 /server.ts | |
| parent | c24822a8fdbc0647aa983fe7d784864ec3b9b854 (diff) | |
| download | PeerTube-8155db669baff9aac5617a7aaf68dd35823ed7c9.tar.gz PeerTube-8155db669baff9aac5617a7aaf68dd35823ed7c9.tar.zst PeerTube-8155db669baff9aac5617a7aaf68dd35823ed7c9.zip | |
Dissociate frameguard from csp
Diffstat (limited to 'server.ts')
| -rw-r--r-- | server.ts | 10 |
1 files changed, 5 insertions, 5 deletions
| @@ -59,11 +59,11 @@ import { baseCSP } from './server/middlewares/csp' | |||
| 59 | 59 | ||
| 60 | if (CONFIG.CSP.ENABLED) { | 60 | if (CONFIG.CSP.ENABLED) { |
| 61 | app.use(baseCSP) | 61 | app.use(baseCSP) |
| 62 | app.use(helmet({ | 62 | } |
| 63 | frameguard: { | 63 | |
| 64 | action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts | 64 | if (CONFIG.SECURITY.FRAMEGUARD.ENABLED) { |
| 65 | }, | 65 | app.use(helmet.frameguard({ |
| 66 | hsts: false | 66 | action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts |
| 67 | })) | 67 | })) |
| 68 | } | 68 | } |
| 69 | 69 | ||