fix(backend): helmet + graphiql (!6303) · Merge requests · Hannes Heine / Ocelot-Social

Hannes Heine requested to merge fix-graphiql-helmet into master May 15, 2023

Created by: ulfgebhardt

🍰 Pullrequest

Since the update to helmet 7.x (former 3.x) helmet checks cross origin. Apparently the graphQL Playground loads its complete script from a CDN. Hence this rule must be disabled in DEBUG mode(where the Playground is available)

Issues

related https://github.com/Ocelot-Social-Community/Ocelot-Social/pull/6296
related https://github.com/graphql/graphql-playground/issues/1283

Todo

Make an issue to figure out how not to rely on a cdn for playground and remove the exception https://github.com/Ocelot-Social-Community/Ocelot-Social/issues/6304

fix(backend): helmet + graphiql

🍰 Pullrequest

Issues

Todo

Merge request reports