helmet exception for graphiql

This commit is contained in:
Ulf Gebhardt 2023-05-15 17:39:22 +02:00
parent 4cb110b6ce
commit aadf093402
Signed by: ulfgebhardt
GPG Key ID: DA6B843E748679C9

View File

@ -82,7 +82,9 @@ const createServer = (options) => {
const app = express()
app.set('driver', driver)
app.use(helmet())
// TODO: this exception is required for the graphql playground, since the playground loads external resources
// See: https://github.com/graphql/graphql-playground/issues/1283
app.use(helmet(CONFIG.DEBUG && { contentSecurityPolicy: false, crossOriginEmbedderPolicy: false }))
app.use('/.well-known/', webfinger())
app.use(express.static('public'))
app.use(bodyParser.json({ limit: '10mb' }))