32 lines
807 B
TypeScript
32 lines
807 B
TypeScript
import type { Core } from "@strapi/strapi";
|
|
|
|
const config: Core.Config.Middlewares = [
|
|
"strapi::logger",
|
|
"strapi::errors",
|
|
{
|
|
name: "strapi::security",
|
|
config: {
|
|
contentSecurityPolicy: {
|
|
useDefaults: true,
|
|
directives: {
|
|
"script-src": ["'self'", "'unsafe-inline'", "https://unpkg.com"],
|
|
"style-src": ["'self'", "'unsafe-inline'", "https://unpkg.com"],
|
|
"connect-src": ["'self'", "https:"],
|
|
"img-src": ["'self'", "data:", "blob:", "https:"],
|
|
"media-src": ["'self'", "data:", "blob:"],
|
|
upgradeInsecureRequests: null,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
"strapi::cors",
|
|
"strapi::poweredBy",
|
|
"strapi::query",
|
|
"strapi::body",
|
|
"strapi::session",
|
|
"strapi::favicon",
|
|
"strapi::public",
|
|
];
|
|
|
|
export default config;
|