Helmet Headers
Security headers on every response.
1 min readEdit this page
Usage
import { helmet } from '@restjs/security'
app.use(helmet())Headers set
| Header | Purpose |
|---|---|
| Content-Security-Policy | Prevents XSS |
| X-Frame-Options | Prevents clickjacking |
| Strict-Transport-Security | Forces HTTPS |
| X-Content-Type-Options | Prevents MIME sniffing |
| Referrer-Policy | Controls referrer info |
Note
helmet() removes X-Powered-By by default.