disable upgradeInsecureRequests

cdapio · Aug 14, 2023 · e1d2317 · e1d2317
1 parent d9eb1b7
commit e1d2317
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/server/express.js b/server/express.js
@@ -184,6 +184,7 @@ function makeApp(authAddress, cdapConfig, uiSettings) {
             objectSrc: [`'none'`],
             workerSrc: [`'self' blob:`],
             reportUri: `https://csp.withgoogle.com/csp/cdap`,
+            upgradeInsecureRequests: null,
           },
         },
         hsts: cdapConfig["hsts.enabled"] === 'true' && hstsSettings,