From 2031115f482baa344bdc240f1e21743448b35ecb Mon Sep 17 00:00:00 2001
From: Simon Detheridge <gh2k@users.noreply.github.com>
Date: Wed, 18 Sep 2019 11:29:43 +0100
Subject: [PATCH] Merge pull request #2156 from overleaf/hb-secure-headers

Use helmet to set nosniff and sameorigin

GitOrigin-RevId: e5d684d772523ca740be75ebe9d248db74209f25
---
 services/web/app/src/infrastructure/Server.js | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/services/web/app/src/infrastructure/Server.js b/services/web/app/src/infrastructure/Server.js
index fb2a90d466..0d4de98d99 100644
--- a/services/web/app/src/infrastructure/Server.js
+++ b/services/web/app/src/infrastructure/Server.js
@@ -204,9 +204,7 @@ webRouter.use(function(req, res, next) {
     dnsPrefetchControl: false,
     referrerPolicy: { policy: 'origin-when-cross-origin' },
     noCache: isLoggedIn || isProjectPage,
-    noSniff: false,
-    hsts: false,
-    frameguard: false
+    hsts: false
   })(req, res, next)
 })