Update helmet config to follow security guidelines

rootstrap / node-ts-api-base

REST API boilerplate made with Express + NodeJS

106 stars 24 forks source link

Update helmet config to follow security guidelines #166

Open nsantos16 opened 3 years ago

nsantos16 commented 3 years ago

References:

https://github.com/goldbergyoni/nodebestpractices/blob/master/sections/security/secureheaders.md
https://expressjs.com/en/advanced/best-practice-security.html
https://itnext.io/how-we-improved-our-node-js-application-security-grade-from-f-to-a-cd42b48192e3

Before and after the implementation check with SSL Labs the grade summary

Alxzu commented 2 years ago

@EMazzaglia @pablanco you implemented this, do you think we're ok with our current config?

nsantos16 commented 2 years ago

Let me know if I can help you with something guys, this issue was created based on the SSL Labs grade test(B grade at that time), so maybe is a good start point.