Helmet

help secure Express/Connect apps with various HTTP headers

Middleware to destroy caching

HTTP Strict Transport Security middleware.

Build Content Security Policy directives.

Middleware to remove the X-Powered-By header

HTTP Public Key Pinning (HPKP) middleware

Middleware to prevent mimetype from being sniffed

Parse Content Security Policy directives.

Middleware to set the Feature-Policy HTTP header

Set the X-Permitted-Cross-Domain-Policies header in Express apps

Middleware to set the Referrer-Policy HTTP header

Middleware to set X-DNS-Prefetch-Control header.

Middleware to disable the X-XSS-Protection header

Middleware to set X-Frame-Options headers

Middleware to set `X-Download-Options` header for IE8 security

Content Security Policy middleware

Middleware to set the Expect-CT header