More security things

2020-01-28 16:29:54 +01:00
parent 186e3d7f73
commit 1924918580
1 changed files with 3 additions and 6 deletions
--- a/server.js
+++ b/server.js
@@ -31,12 +31,9 @@ app.use(
    }
  })
 );
-app.use(
-  helmet({
-    frameguard: false
-  })
-);
-app.use(referrerPolicy({ policy: "origin-when-cross-origin" }));
+app.use(helmet());
+app.use(helmet.frameguard({ action: "sameorigin" }));
+app.use(referrerPolicy({ policy: "origin" }));

 app.use(cors());
 mongoose.promise = global.Promise;