Removing or modifying CSP headers in deployed app
I have a newly deployed app, and trying to add authorizer plugin. Works in local - but in production, CSP headers are blocking it.
Where can I remove them or modify them to allow new domains?
5 Replies
Project ID:
N/AN/A
your app is responsible for setting whatever headers you may need. what kind of app are you deploying?
@Brody u sir are correct and deserve a cookie. I had added a middleware called hemlet in my express server that was implicitly adding csp headers
Great!