helmet
help secure Express/Connect apps with various HTTP headers
Last updated 6 days ago by evanhahn .
MIT · Repository · Bugs · Original npm · Tarball · package.json
$ cnpm install helmet 
SYNC missed versions from official npm registry.

Helmet

npm version npm dependency status Build Status FOSSA Status

Helmet helps you secure your Express apps by setting various HTTP headers. It's not a silver bullet, but it can help!

Looking for a version of Helmet that supports the Koa framework?

Quick start

First, run npm install helmet --save for your app. Then, in an Express (or Connect) app:

const express = require("express");
const helmet = require("helmet");

const app = express();

app.use(helmet());

// ...

It's best to use Helmet early in your middleware stack so that its headers are sure to be set.

You can also use its pieces individually:

app.use(helmet.xssFilter());
app.use(helmet.frameguard());

You can disable a middleware that's normally enabled by default. This will disable frameguard but include the other defaults.

app.use(
  helmet({
    frameguard: false,
  })
);

You can also set options for a middleware. Setting options like this will always include the middleware, whether or not it's a default.

app.use(
  helmet({
    frameguard: {
      action: "deny",
    },
  })
);

If you're using Express 3, make sure these middlewares are listed before app.router.

How it works

Helmet is a collection of 11 smaller middleware functions that set HTTP response headers. Running app.use(helmet()) will not include all of these middleware functions by default.

Module Default?
contentSecurityPolicy for setting Content Security Policy
crossdomain for handling Adobe products' crossdomain requests
dnsPrefetchControl controls browser DNS prefetching
expectCt for handling Certificate Transparency
frameguard to prevent clickjacking
hidePoweredBy to remove the X-Powered-By header
hsts for HTTP Strict Transport Security
ieNoOpen sets X-Download-Options for IE8+
noSniff to keep clients from sniffing the MIME type
referrerPolicy to hide the Referer header
xssFilter adds some small XSS protections

You can see more in the documentation.

Current Tags

  • 3.23.3                                ...           latest (6 days ago)

97 Versions

  • 3.23.3                                ...           6 days ago
  • 3.23.2                                ...           9 days ago
  • 3.23.1                                ...           16 days ago
  • 3.23.0                                ...           20 days ago
  • 3.22.1                                ...           21 days ago
  • 3.22.0                                ...           3 months ago
  • 3.21.3                                ...           4 months ago
  • 3.21.2                                ...           8 months ago
  • 3.21.1                                ...           9 months ago
  • 3.21.0                                ...           10 months ago
  • 3.20.1                                ...           10 months ago
  • 3.20.0                                ...           a year ago
  • 3.19.0                                ...           a year ago
  • 3.18.0                                ...           a year ago
  • 3.17.0                                ...           a year ago
  • 3.16.0                                ...           a year ago
  • 3.15.1                                ...           a year ago
  • 3.15.0                                ...           2 years ago
  • 3.14.0                                ...           2 years ago
  • 3.13.0                                ...           2 years ago
  • 3.12.2                                ...           2 years ago
  • 3.12.1                                ...           2 years ago
  • 3.12.0                                ...           2 years ago
  • 3.11.0                                ...           2 years ago
  • 3.10.0                                ...           2 years ago
  • 3.9.0                                ...           3 years ago
  • 3.8.2                                ...           3 years ago
  • 3.8.1                                ...           3 years ago
  • 3.8.0                                ...           3 years ago
  • 3.7.0                                ...           3 years ago
  • 3.6.1                                ...           3 years ago
  • 3.6.0                                ...           3 years ago
  • 3.5.0                                ...           3 years ago
  • 3.4.1                                ...           3 years ago
  • 3.4.0                                ...           3 years ago
  • 3.3.0                                ...           4 years ago
  • 3.2.0                                ...           4 years ago
  • 3.1.0                                ...           4 years ago
  • 3.0.0                                ...           4 years ago
  • 2.3.0                                ...           4 years ago
  • 2.2.0                                ...           4 years ago
  • 2.1.3                                ...           4 years ago
  • 2.1.2                                ...           4 years ago
  • 2.1.1                                ...           4 years ago
  • 2.1.0                                ...           4 years ago
  • 2.0.0                                ...           4 years ago
  • 1.3.0                                ...           4 years ago
  • 1.2.0                                ...           4 years ago
  • 1.1.0                                ...           4 years ago
  • 1.0.2                                ...           4 years ago
  • 1.0.1                                ...           5 years ago
  • 1.0.0                                ...           5 years ago
  • 0.15.0                                ...           5 years ago
  • 0.14.0                                ...           5 years ago
  • 0.13.0                                ...           5 years ago
  • 0.12.0                                ...           5 years ago
  • 0.11.0                                ...           5 years ago
  • 0.10.0                                ...           5 years ago
  • 0.9.1                                ...           5 years ago
  • 0.9.0                                ...           5 years ago
  • 0.8.0                                ...           5 years ago
  • 0.7.1                                ...           5 years ago
  • 0.7.0                                ...           5 years ago
  • 0.6.2                                ...           5 years ago
  • 0.6.1                                ...           5 years ago
  • 0.6.0                                ...           5 years ago
  • 0.5.4                                ...           6 years ago
  • 0.5.3                                ...           6 years ago
  • 0.5.2                                ...           6 years ago
  • 0.5.1                                ...           6 years ago
  • 0.5.0                                ...           6 years ago
  • 0.4.2                                ...           6 years ago
  • 0.4.1                                ...           6 years ago
  • 0.4.0                                ...           6 years ago
  • 0.3.2                                ...           6 years ago
  • 0.3.1                                ...           6 years ago
  • 0.3.0                                ...           6 years ago
  • 0.2.4                                ...           6 years ago
  • 0.2.3                                ...           6 years ago
  • 0.2.2                                ...           6 years ago
  • 0.2.1                                ...           6 years ago
  • 0.2.0                                ...           6 years ago
  • 0.1.3                                ...           6 years ago
  • 0.1.2                                ...           7 years ago
  • 0.1.1                                ...           7 years ago
  • 0.1.0                                ...           7 years ago
  • 0.0.11                                ...           7 years ago
  • 0.0.10                                ...           7 years ago
  • 0.0.9                                ...           7 years ago
  • 0.0.8                                ...           7 years ago
  • 0.0.7                                ...           8 years ago
  • 0.0.6                                ...           8 years ago
  • 0.0.5                                ...           8 years ago
  • 0.0.4                                ...           8 years ago
  • 0.0.3                                ...           8 years ago
  • 0.0.2                                ...           8 years ago
  • 0.0.1                                ...           8 years ago
Downloads
Today 731
This Week 5,631
This Month 2,205
Last Day 1,474
Last Week 6,179
Last Month 21,643
Dependencies (11)
Dev Dependencies (13)
Dependents (1952)

Copyright 2014 - 2016 © taobao.org |