Unable serve bull monitor with http.createServer about bull-monitor

[weilinzung]

I just figured out it is because of the helmet middleware

Refused to load the script 'https://cdn.jsdelivr.net/npm/@bull-monitor/[email protected]/build/main.js' because it violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

[weilinzung]

Is possible to allow those resource files loaded from the package? so we can compile them as part of our app?

[s-r-x]

Is possible to allow those resource files loaded from the package? so we can compile them as part of our app?

nope.

i'll try to look into it. you can add { contentSecurityPolicy: false } into your helmet config as a bandaid

[weilinzung]

Is possible to allow those resource files loaded from the package? so we can compile them as part of our app?

nope.

i'll try to look into it. you can add { contentSecurityPolicy: false } into your helmet config as a bandaid

I actually did the way below and is working locally, but the entire app(all routes) gets 504 errors once it is deployed to Google Cloud Run.

  helmet({
    contentSecurityPolicy: {
      useDefaults: true,
      directives: {
        'script-src': ["'self'", 'cdn.jsdelivr.net']
      }
    }
  }),