Helmet - Express Middleware

[mootzville]

Found a nice article on a module I hadn't seen before called Helmet. It's an express middleware that makes adding content security policy to your express app pretty straightforward. Thought I'd put it up here and suggest looking into adding it to the nodebb core.

Protect Your Node App's Noggin With Helmet - Scott Smith

Learn how to protect your Express Node application from cross-site scripting, script injection, clickjacking, insecure requests, and more by using a set of Express middleware provided by Helmet.

(scottksmith.com)

[julian]

Yes, we fully intend on utilising this with nodebb, assuming the overhead is minimal.