43 lines
933 B
TypeScript
43 lines
933 B
TypeScript
import type { Core } from "@strapi/strapi";
|
|
|
|
const config = ({
|
|
env,
|
|
}: Core.Config.Shared.ConfigParams): Core.Config.Middlewares => [
|
|
"strapi::logger",
|
|
"strapi::errors",
|
|
{
|
|
name: "strapi::security",
|
|
config: {
|
|
contentSecurityPolicy: {
|
|
useDefaults: true,
|
|
directives: {
|
|
"connect-src": ["'self'", "https:"],
|
|
"img-src": [
|
|
"'self'",
|
|
"data:",
|
|
"blob:",
|
|
"market-assets.strapi.io",
|
|
"r2.nicwands.com",
|
|
],
|
|
"media-src": [
|
|
"'self'",
|
|
"data:",
|
|
"blob:",
|
|
"market-assets.strapi.io",
|
|
"r2.nicwands.com",
|
|
],
|
|
upgradeInsecureRequests: null,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
"strapi::cors",
|
|
"strapi::poweredBy",
|
|
"strapi::query",
|
|
"strapi::body",
|
|
"strapi::session",
|
|
"strapi::favicon",
|
|
"strapi::public",
|
|
];
|
|
|
|
export default config;
|