I am getting this error when I use helmet Refused to load the image '<URL>' because it violates the following Content Security Policy directive: "img-src 'self' data:". which makes sense, I am violating the CSP that helmet implements.
I've been able to find in this:
app.use(
helmet({
contentSecurityPolicy: false,
})
);
which does allow my images to render, but I still want the CSP that the helmet provides. I just need to essentially whitelist my S3 link but I can't find anything in their docs on this topic.