feat(app): add helmet for XSS protection
In order to improve security, we've added Helmet to the app to provide protection against cross-site scripting (XSS) attacks. This integration involves enabling the xss filter middleware through Helmet. Issue: #3 Signed-off-by: Mathis <yidhra@tuta.io>
This commit is contained in:
parent
3ee76fb965
commit
6c601e0b42
@ -2,6 +2,7 @@ import express, { type Express } from 'express';
|
||||
import cors from 'cors';
|
||||
import compression from 'compression';
|
||||
import {Logger} from "tslog";
|
||||
import helmet from "helmet";
|
||||
|
||||
|
||||
const logger = new Logger({ name: "App" });
|
||||
@ -12,6 +13,14 @@ const app: Express = express();
|
||||
app.use(cors());
|
||||
app.options('*', cors());
|
||||
|
||||
// enable xss sanitizer
|
||||
app.use(
|
||||
helmet({
|
||||
xXssProtection: true,
|
||||
}),
|
||||
);
|
||||
app.use(helmet.xXssProtection())
|
||||
|
||||
// parse json request body
|
||||
app.use(express.json());
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user