From dd93b9f36b41644a6a1808b251059721a456c848 Mon Sep 17 00:00:00 2001
From: Alex Holliday <ajhollid@gmail.com>
Date: Thu, 22 May 2025 11:20:11 -0700
Subject: [PATCH] update helmet policy

---
 server/index.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/server/index.js b/server/index.js
index 89f5930b3..eea5b015a 100755
--- a/server/index.js
+++ b/server/index.js
@@ -324,6 +324,12 @@ const startApp = async () => {
 	app.use(
 		helmet({
 			hsts: false,
+			contentSecurityPolicy: {
+				useDefaults: true,
+				directives: {
+					upgradeInsecureRequests: null,
+				},
+			},
 		})
 	);
 	app.use(