From d219a1eb7e183bd00811132c39903a33b3059e64 Mon Sep 17 00:00:00 2001
From: Matthew R <matthew@staff.libraryofcode.org>
Date: Sun, 17 Nov 2019 16:20:56 -0500
Subject: [PATCH] fix issue with CSP

---
 src/api/Server.ts | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/api/Server.ts b/src/api/Server.ts
index 81c5055..8cd6063 100644
--- a/src/api/Server.ts
+++ b/src/api/Server.ts
@@ -54,7 +54,11 @@ export default class Server {
     this.app.use(helmet({
       hsts: false,
       hidePoweredBy: false,
-      contentSecurityPolicy: true,
+      contentSecurityPolicy: {
+        directives: {
+          defaultSrc: ['self'],
+        },
+      },
     }));
     this.app.use(bodyParser.json());
     this.app.listen(this.options.port, () => {