Merge pull request #15 from doni404/hotfix/resources-cors-fix

fix: update helmet setting cross origin for resources
doni404 · Jun 25, 2023 · 6680374 · 6680374
2 parents e53f21c + a5f5572
commit 6680374
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/app.js b/src/app.js
@@ -16,7 +16,11 @@ import newsRouter from './routes/news.js';
 import resourcesRouter from './routes/resources.js';
 
 // Addming helmet to enhance your API's security
-app.use(helmet());
+// app.use(helmet({
+// 	crossOriginResourcePolicy: false,
+// }));
+// To handle resources cross origin
+app.use(helmet.crossOriginResourcePolicy({ policy: "cross-origin" }));
 
 // Using bodyParser to parse JSON bodies into JS object
 app.use(bodyParser.json());