-
Notifications
You must be signed in to change notification settings - Fork 5
/
server.js
45 lines (40 loc) · 1.35 KB
/
server.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
const express = require('express')
const helmet = require('helmet')
const path = require('path')
const builtDirectory = path.join(__dirname, 'build')
const PORT = process.env.PORT || '3000'
const app = express()
app.disable('x-powered-by')
app.use(
helmet({
crossOriginEmbedderPolicy: false,
crossOriginResourcePolicy: false,
contentSecurityPolicy: {
directives: {
frameAncestors: ['https://dapp-browser.apps.ledger.com/', 'https://app.safe.global/'],
scriptSrc: [
"'self'",
"'unsafe-inline'",
'https://static.cloudflareinsights.com',
'https://cdn.jsdelivr.net/npm/@ledgerhq/connect-kit@1',
'https://cdn.usefathom.com/script.js',
],
connectSrc: ["'self'", '*'],
imgSrc: ["'self'", 'https: data:'],
frameSrc: ["'self'", 'https://verify.walletconnect.com/'],
},
},
frameguard: false,
}),
)
app.use('/manifest.json', function addOrigin(req, res, next) {
res.set({
'Access-Control-Allow-Origin': '*',
'Access-Control-Allow-Methods': 'GET',
'Access-Control-Allow-Headers': 'X-Requested-With, content-type, Authorization',
})
next()
})
app.use(express.static(builtDirectory))
app.get('*', (req, res) => res.sendFile(path.join(builtDirectory, 'index.html')))
app.listen(PORT, () => console.log(`Server started on port ${PORT}`))