disavle report-only csp

a1e6ec6b · tom · 692ea116 · a1e6ec6b
Commit a1e6ec6b authored Apr 20, 2023 by tom
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

middleware.ts middleware.ts +1 -1

No files found.
--- a/middleware.ts
+++ b/middleware.ts
@@ -28,7 +28,7 @@ export function middleware(req: NextRequest) {
  const end = Date.now();
  const res = NextResponse.next();
-  res.headers.append(appConfig.isDev ? 'Content-Security-Policy' : 'Content-Security-Policy-Report-Only', cspPolicy);
+  res.headers.append('Content-Security-Policy', cspPolicy);
  res.headers.append('Server-Timing', `middleware;dur=${ end - start }`);
  return res;