Use helmet Express middleware

mozilla-magnet / magnet-metadata-service

A service that returns metadata for given URLs

Other

8 stars 10 forks source link

Use helmet Express middleware #39

Open pdehaan opened 8 years ago

pdehaan commented 8 years ago

... since we're using express: https://www.npmjs.com/package/helmet

help secure Express/Connect apps with various HTTP headers

wilsonpage commented 8 years ago

@pdehaan do you have a suggested configuration?

pdehaan commented 8 years ago

¯_(ツ)_/¯

We can probably just start with the defaults, and then work w/ OPs to fine tune the config when we go to production. I imagine we'll at least want CSP and other things enabled.