Merge pull request #130 from codeanker/development

1.4.2. Update content security policy in server.ts

api/src/server.ts

@@ -11,15 +11,18 @@ import { createContext } from './context'
 import { logger } from './logger'
 import cacheControl from './middleware/cache-control'
 import router from './routes'
-import { isProduction } from './util/is-production'
 
 import { appRouter } from './index'
 
 export const app = new Koa()
 
 app.use(
   helmet({
-    contentSecurityPolicy: isProduction(),
+    contentSecurityPolicy: {
+      directives: {
+        'img-src': ["'self'", 'githubusercontent.com'],
+      },
+    },
   })
 )
 app.use(cors({ origin: '*' }))

package.json

@@ -1,7 +1,7 @@
 {
   "name": "codeanker-project",
   "author": "CODEANKER GmbH",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "",
   "workspaces": [
     "api",