remove a debug line before release which killed CSP

7 years ago · 723151254c
parent 7ca60e55a7
commit 723151254c
1 changed files with 1 additions and 1 deletions
--- a/server.js
+++ b/server.js
@ -32,7 +32,7 @@ var setHeaders = (function () {
    if (typeof(config.httpHeaders) !== 'object') { return function () {}; }

    const headers = clone(config.httpHeaders);
-    if (config.contentSecurity && false) {
+    if (config.contentSecurity) {
        headers['Content-Security-Policy'] = clone(config.contentSecurity);
        if (!/;$/.test(headers['Content-Security-Policy'])) { headers['Content-Security-Policy'] += ';' }
        if (headers['Content-Security-Policy'].indexOf('frame-ancestors') === -1) {