`
export default function mockVaPortal(req, res, next) {
if (process.env.NODE_ENV !== 'development') {
throw new Error('Should not have been enabled')
}
if (req.url.startsWith('/iframe/docs_va')) {
res.removeHeader('content-security-policy')
return res.status(200).type('text/html').send(HTML)
}
next()
}