default to empty object in helmet

This commit is contained in:
Ulf Gebhardt 2023-05-22 12:23:47 +02:00
parent fef12f51c0
commit 19f2b0ae66
Signed by: ulfgebhardt
GPG Key ID: DA6B843E748679C9

View File

@ -85,7 +85,9 @@ const createServer = (options) => {
// TODO: this exception is required for the graphql playground, since the playground loads external resources
// See: https://github.com/graphql/graphql-playground/issues/1283
app.use(
helmet(CONFIG.DEBUG && { contentSecurityPolicy: false, crossOriginEmbedderPolicy: false }),
helmet(
(CONFIG.DEBUG && { contentSecurityPolicy: false, crossOriginEmbedderPolicy: false }) || {},
),
)
app.use('/.well-known/', webfinger())
app.use(express.static('public'))