Add workaround for swagger-api/swagger-ui#3370

SkeLLLa · Aug 25, 2020 · d839d54 · d839d54
1 parent 027d965
commit d839d54
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/routes.js b/lib/routes.js
@@ -14,7 +14,9 @@ async function oasRoutes(fastify, options) {
         reply.redirect(`${redirectUrl}index.html`);
       },
     });
+    const swaggerCspHeader = "script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline' data: ; object-src 'none'";
     fastify.register(fstatic, {
+      setHeaders: (res, path, stat) => {res.setHeader('Content-Security-Policy', swaggerCspHeader)},
       root: path.join(__dirname, '..', 'static'),
     });
   }