Revert too restrictive CORS for now

This commit is contained in:
Jaifroid 2024-11-10 15:24:12 +00:00
parent 00b8e50fc9
commit 646b9de6ca

View File

@ -218,7 +218,7 @@ app.whenReady().then(() => {
// Add security headers // Add security headers
server.use((req, res, next) => { server.use((req, res, next) => {
res.setHeader('X-Content-Type-Options', 'nosniff'); res.setHeader('X-Content-Type-Options', 'nosniff');
res.setHeader('X-Frame-Options', 'DENY'); // res.setHeader('X-Frame-Options', 'SAMEORIGIN');
res.setHeader('X-XSS-Protection', '1; mode=block'); res.setHeader('X-XSS-Protection', '1; mode=block');
// We already set the CSP in the HTML file and in the SErviceWorker... // We already set the CSP in the HTML file and in the SErviceWorker...
// res.setHeader('Content-Security-Policy', "default-src 'self'"); // res.setHeader('Content-Security-Policy', "default-src 'self'");
@ -237,7 +237,7 @@ app.whenReady().then(() => {
app.quit(); app.quit();
return; return;
} }
expressServer = server.listen(port, '127.0.0.1', () => { expressServer = server.listen(port, () => {
console.log(`Server running on port ${port}`); console.log(`Server running on port ${port}`);
// Create the new window // Create the new window
createWindow(); createWindow();