mentos1386/send
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

disable CSP when env = development

Browse source
This commit is contained in:
Danny Coates 2017-08-29 11:19:21 -07:00
parent ced640c24a
commit 74718d6361
No known key found for this signature in database
GPG key ID: 4C442633C62E00CB
1 changed files with 24 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
server/routes/index.js
View file

@ -7,6 +7,7 @@ const storage = require('../storage');
const config = require('../config'); const config = require('../config');
const pages = require('./pages'); const pages = require('./pages');
// const lang = require('fluent-langneg') // const lang = require('fluent-langneg')
const IS_DEV = config.env === 'development';
module.exports = function(app) { module.exports = function(app) {
app.use( app.use(
@ -18,9 +19,10 @@ module.exports = function(app) {
app.use( app.use(
helmet.hsts({ helmet.hsts({
maxAge: 31536000, maxAge: 31536000,
force: config.env === 'production' force: !IS_DEV
}) })
); );
if (!IS_DEV) {
app.use( app.use(
helmet.contentSecurityPolicy({ helmet.contentSecurityPolicy({
directives: { directives: {
@ -41,6 +43,7 @@ module.exports = function(app) {
} }
}) })
); );
}
app.use( app.use(
busboy({ busboy({
limits: { limits: {