it just doesn't work

[EitanK96]

this is my code

const express = require('express')
const helmet = require('helmet')
const morgan = require('morgan')
const compression = require('compression')
const bodyParser = require('body-parser')
const Agenda = require('agenda');
const Agendash = require('agendash2');


const agenda = new Agenda({db: {address: process.env.MONGO_URL, collection: process.env.AGENDA_COLLECTION}})
const port = process.env.PORT || 3000

const app = express()
app.use(morgan('dev'))
app.use(helmet())
app.use(compression())
app.use(bodyParser.urlencoded({ extended: false }))
app.use(bodyParser.json())


app.use('/dash', Agendash(agenda));
app.listen(port, () => console.info(`Service is listening on port ${port}!`))

I am getting the following errors in the console:

probably related to the package install

[dbetter]

@EitanWeMatch - What's causing this here is helmet - which by the way used, applies default settings to CSP (Content Security Policy): https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP.

You can either:

1. Configure helmet specific configurations with respect to CSP property:

• https://helmetjs.github.io/ - helmet.contentSecurityPolicy(options)

2. Add another middleware before your route that removes this CSP header from the response:

app.use(
    '/dash',
    (req, res, next) => {
      res.removeHeader('Content-Security-Policy');
      next();
    },
    Agendash(agenda)
);

[marwej]

Any plans on a version that doesn't load resources from external sources?

[koresar]

@marwej I was planning you would contribute a PR. Would you please?

[emilniklas]

@koresar Hello 👋 @marwej's colleague here. A PR is up at #202 which sets the CSP header to the correct value to host the Agendash app, which should fix OP @EitanWeMatch's problem as well as ours.

[koresar]

You people are amazing! 😍