fix: remove duplicate configuration for helmet-hsts

5 years ago · 0f10e0836b
parent ad68a338c4
commit 0f10e0836b
1 changed files with 1 additions and 3 deletions
--- a/src/webserver.js
+++ b/src/webserver.js
@ -164,9 +164,7 @@ function setupExpressApp(app) {
 		saveUninitialized: nconf.get('sessionSaveUninitialized') || false,
 	}));

-	app.use(helmet({
-		hsts: !!meta.config['hsts-enabled'],
-	}));
+	app.use(helmet());
 	app.use(helmet.referrerPolicy({ policy: 'strict-origin-when-cross-origin' }));
 	if (meta.config['hsts-enabled']) {
 		app.use(helmet.hsts({