freeCodeCamp Challenge Guide: Set a Content Security Policy with helmet.contentSecurityPolicy()

Guide
1

Set a Content Security Policy with helmet.contentSecurityPolicy()

Hints

Hint 1

You want your app to use helmet’s contentSecurityPolicy() method.

Hint 2

Be sure to give the directives object in the configuration a defaultSrc and scriptSrc.

Solutions

Solution 1 (Click to Show/Hide)

In the myApp.js file, add app.use(helmet.contentSecurityPolicy({ directives: { defaultSrc: ["'self'"], scriptSrc: ["'self'", "trusted-cdn.com"] }} )) under the tenth instruction.

Note: Be sure to submit the link to the live demo of your project.

2 Likes