dont upgrade to https in dev (#818)

navikt · Oct 3, 2024 · ccc8001 · ccc8001
1 parent 809fc8c
commit ccc8001
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/middleware.js b/src/middleware.js
@@ -32,7 +32,7 @@ function addCspHeaders(requestHeaders, responseHeaders) {
             frame-ancestors 'none';
             frame-src 'self';
             block-all-mixed-content;
-            upgrade-insecure-requests;
+            ${process.env.NODE_ENV === "production" ? "upgrade-insecure-requests;" : ""};
             connect-src 'self' https://amplitude.nav.no https://sentry.gc.nav.no;
     `;