Elysia application does not load swagger documentation if using elysia-helmet lib

[vitorpldev]

I'm facing a problem when using swagger() and helmet() together in an Elysia application. When I configure the application as follows:

import Elysia from 'elysia'
import swagger from '@elysiajs/swagger'
import { helmet } from 'elysia-helmet'

const app = new Elysia()
  .use(swagger())
  .use(helmet())
  .get('/root', () => 'Hello World')
  .listen(3333)

Swagger should automatically add a /swagger route to document API routes. However, when using helmet(), the /swagger route does not load correctly; the page is completely blank.

It seems that helmet() is enforcing some security restrictions that prevent Swagger from working as expected. If anyone has experienced this or knows of a solution, I would appreciate your help!

[vastamaki]

You can use something like this to make it work

app.use(
  helmet({
    contentSecurityPolicy: {
      directives: {
        defaultSrc: ["'self'"],
        scriptSrc: [
          "'self'",
          "'unsafe-inline'",
          'unpkg.com',
          'cdn.jsdelivr.net',
        ],
        styleSrc: ["'self'", "'unsafe-inline'", 'unpkg.com'],
        imgSrc: ['data:'],
      },
    },
  })
)

[cholasimmons]

Did this ever work for you? Last version that worked for me was v1.0.5, since then I've got nothing from every version after that.
I've been on almost every version of Elysia, now 1.2.9.
Still can't get swagger to display any content, all I get is a standalone.js error:

Failed to fetch the specification at /swagger/json 
Failed to fetch spec from URL: Error: Failed to fetch the specification (Status: 404)

directives: {
defaultSrc: ["'self'"],
scriptSrc: [
"'self'",
"'unsafe-inline'",
'unpkg.com',
'cdn.jsdelivr.net',
],
styleSrc: ["'self'", "'unsafe-inline'", 'unpkg.com'],
imgSrc: ['data:'],
},