Nemcio/NodeBB
1
0
Fork 0
mirror of https://github.com/NodeBB/NodeBB.git synced 2025-11-03 04:25:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

dep: closes #11577

Browse Source 
Breaking: Cross-Origin-Embedder-Policy middleware is now disabled by default. See #​411
This commit is contained in:
Barış Soner Uşaklı
2023-05-10 17:42:56 -04:00
parent 90e53177fc
commit ad1ae29105
2 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/webserver.js
View File

@@ -192,11 +192,9 @@ function setupHelmet(app) {
crossOriginOpenerPolicy: { policy: meta.config['cross-origin-opener-policy'] },
crossOriginResourcePolicy: { policy: meta.config['cross-origin-resource-policy'] },
referrerPolicy: { policy: 'strict-origin-when-cross-origin' },
crossOriginEmbedderPolicy: !!meta.config['cross-origin-embedder-policy'],
};
if (!meta.config['cross-origin-embedder-policy']) {
options.crossOriginEmbedderPolicy = false;
}
if (meta.config['hsts-enabled']) {
options.hsts = {
maxAge: meta.config['hsts-maxage'],