From 8a03d51ccf1ca9850e78e5d7bb40c29aa8162198 Mon Sep 17 00:00:00 2001
From: Bintang Murtifandy <21844@student.stembayo.sch.id>
Date: Mon, 25 May 2026 20:36:40 +0700
Subject: [PATCH] fix(assets): allow cross-origin media

---
 src/app.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/app.js b/src/app.js
index 6da6f51..affd47c 100644
--- a/src/app.js
+++ b/src/app.js
@@ -13,7 +13,11 @@ app.use(
     credentials: true,
   })
 );
-app.use(helmet());
+app.use(
+  helmet({
+    crossOriginResourcePolicy: { policy: 'cross-origin' },
+  })
+);
 app.use(express.json({ limit: '2mb' }));
 app.use(cookieParser());
 app.use(morgan(process.env.NODE_ENV === 'production' ? 'combined' : 'dev'));