Update Security Policy rule

2024-02-02 17:30:44 +03:00 · 2024-02-02 17:30:44 +03:00 · b1a7e04158
parent d2d35e5755
commit b1a7e04158
1 changed files with 12 additions and 1 deletions
--- a/strapi/config/middlewares.ts
+++ b/strapi/config/middlewares.ts
@ -1,7 +1,18 @@
 export default [
  'strapi::logger',
  'strapi::errors',
-  'strapi::security',
+  {
+    name: 'strapi::security',
+    config: {
+      contentSecurityPolicy: {
+        useDefaults: true,
+        directives: {
+          'connect-src': ["'self'", 'http:', 'https:'],
+          upgradeInsecureRequests: null,
+        },
+      },
+    },
+  },
  'strapi::cors',
  'strapi::poweredBy',
  'strapi::query',