Proper helmet settings that allow Apollo Sandbox to work

Hi!

When we enable helmet (with the default configuration, app.use(helmet()), we are no longer able to use Apollo Sandbox. Lots of “refused to load” errors:

Anyone know of some settings that will allow this to work?

Hi @synic, sorry for the delay. This is a bit out of my wheelhouse but you’ll probably find this relevant:

Note this is outdated and written for graphiql but I suppose you’ll find the configuration at least a helpful jumping off point if not a viable workaround.