From 5588e3977be5e1a6c81fd391b943acdcadac28ec Mon Sep 17 00:00:00 2001
From: Ben Whitmore <ben.whitmore0@gmail.com>
Date: Tue, 16 Mar 2021 17:35:03 +1300
Subject: [PATCH] chore: permit graphql Playground to work in dev builds
---
server/app.js | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/server/app.js b/server/app.js
index 83a00c011b..0b3034d47e 100644
--- a/server/app.js
+++ b/server/app.js
@@ -49,7 +49,12 @@ const configureApp = app => {
app.use(bodyParser.urlencoded({ extended: false }))
app.use(cookieParser())
- app.use(helmet())
+ app.use(
+ helmet({
+ contentSecurityPolicy:
+ process.env.NODE_ENV === 'production' ? undefined : false, // Disable contentSecurityPolicy for non-prod use, so GraphQl Playground works
+ }),
+ )
app.use(express.static(path.resolve('.', '_build')))
app.use('/public', express.static(path.resolve(__dirname, '../public')))
--
GitLab