From a2a460a8834517c50657a01e8f37997a3b2188a3 Mon Sep 17 00:00:00 2001
From: James Long <longster@gmail.com>
Date: Thu, 19 May 2022 22:42:56 -0400
Subject: [PATCH] Fix CORS issues

---
 app.js | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index 6dfae8b..a44d6fe 100644
--- a/app.js
+++ b/app.js
@@ -29,7 +29,16 @@ app.get('/mode', (req, res) => {
 app.use(actuator()); // Provides /health, /metrics, /info
 
 // The web frontend
-app.use(express.static(__dirname + '/node_modules/@actual-app/web/build'));
+app.use((req, res, next) => {
+  res.set('Cross-Origin-Opener-Policy', 'same-origin');
+  res.set('Cross-Origin-Embedder-Policy', 'require-corp');
+  next();
+});
+app.use(
+  express.static(__dirname + '/node_modules/@actual-app/web/build', {
+    index: false
+  })
+);
 app.get('/*', (req, res) => {
   res.sendFile(__dirname + '/node_modules/@actual-app/web/build/index.html');
 });