@shopify/shopify-app-express/dist/cjs/middlewares/csp-headers.js

Shopify Express Middleware - to simplify the building of Shopify Apps with Express

'use strict';

function cspHeaders({ api }) {
    return function cspHeaders() {
        return async (req, res, next) => {
            addCSPHeader(api, req, res);
            next();
        };
    };
}
function addCSPHeader(api, req, res) {
    const shop = api.utils.sanitizeShop(req.query.shop);
    if (api.config.isEmbeddedApp && shop) {
        res.setHeader('Content-Security-Policy', `frame-ancestors https://${encodeURIComponent(shop)} https://admin.shopify.com https://*.spin.dev https://admin.myshopify.io https://admin.shop.dev;`);
    }
    else {
        res.setHeader('Content-Security-Policy', `frame-ancestors 'none';`);
    }
}

exports.addCSPHeader = addCSPHeader;
exports.cspHeaders = cspHeaders;
//# sourceMappingURL=csp-headers.js.map