express.static was serving docs.html before the /docs route handler, causing Helmet default CSP to be used instead of the custom Swagger UI CSP. This blocked unsafe-eval and blob: workers needed by Swagger UI. |
||
|---|---|---|
| .. | ||
| __tests__ | ||
| middleware | ||
| routes | ||
| services | ||
| index.js | ||