@rtorcato/api-security-express v0.1.0

Type Aliases

SecurityOptions

SecurityOptions = Parameters<typeof helmet>[0]

Defined in: index.ts:5

Options accepted by helmet — see https://helmetjs.github.io/.

Functions

securityMiddleware()

securityMiddleware(options?): RequestHandler

Defined in: index.ts:26

Express security-headers middleware — a thin wrapper over helmet that applies its full, sane default header suite: X-Content-Type-Options, X-Frame-Options, Referrer-Policy, Strict-Transport-Security, a default Content-Security-Policy, and more.

Call it with no arguments for helmet's secure defaults, or pass any helmet option to customize. Hono ships secureHeaders built in, so this adapter is Express-only.

Parameters

options?

Readonly<HelmetOptions>

Returns

RequestHandler

Examples

app.use(securityMiddleware())

// Serving HTML with a custom Content-Security-Policy:
app.use(securityMiddleware({
  contentSecurityPolicy: { directives: { 'script-src': ["'self'"] } },
}))