From 0601d4add6acb501f5d5a1246ceaa8c1a09ae60d Mon Sep 17 00:00:00 2001 From: Alex Whitehead-Smith Date: Thu, 13 Jul 2023 11:13:46 +0100 Subject: [PATCH] BAU: Remove Certificate Transparency option The `Expect-CT` header is now deprecated (see https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Expect-CT) and helmet dropped support for it as of helmet v7 (https://github.com/helmetjs/helmet/issues/310) --- src/config/helmet.ts | 1 - 1 file changed, 1 deletion(-) diff --git a/src/config/helmet.ts b/src/config/helmet.ts index 773423e52..604522ccd 100644 --- a/src/config/helmet.ts +++ b/src/config/helmet.ts @@ -39,5 +39,4 @@ export const helmetConfiguration: Parameters[0] = { }, referrerPolicy: false, permittedCrossDomainPolicies: false, - expectCt: false, };