Usage#
typescript
import { helmet } from '@AxilJS/security'
app.use(helmet())Headers set#
| Header | Purpose |
|---|---|
| Content-Security-Policy | Prevents XSS |
| X-Frame-Options | Prevents clickjacking |
| Strict-Transport-Security | Forces HTTPS |
| X-Content-Type-Options | Prevents MIME sniffing |
| Referrer-Policy | Controls referrer info |
Note
helmet() removes X-Powered-By by default.