helmetjs / helmet

Help secure Express apps with various HTTP headers

Home Page:https://helmetjs.github.io/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CSP: document functions as directive values

EvanHahn opened this issue · comments

You can use functions as directive values in the contentSecurityPolicy middleware. See tests.

This is poorly-documented and we should add a note about it.