Merge pull request sagarkarira#48 from XhmikosR/helmet

Add helmet

Author: sagarkarira

app.js

@@ -1,4 +1,5 @@
 const express = require('express');
+const helmet = require('helmet');
 const morgan = require('morgan');
 const chalk = require('chalk');
 
@@ -27,6 +28,22 @@ function errorHandler(error, res) {
 
 app.set('json escape', true);
 
+app.use(helmet({
+  dnsPrefetchControl: false,
+  frameguard: {
+    action: 'deny'
+  }
+}));
+
+app.use(helmet.hsts({
+  force: true,
+  includeSubDomains: true,
+  maxAge: 63072000, // 2 years
+  preload: true
+}));
+
+app.use(helmet.referrerPolicy({ policy: 'strict-origin-when-cross-origin' }));
+
 app.use(morgan(':remote-addr :remote-user :method :url :status :res[content-length] - :response-time ms'));
 app.use((req, res, next) => {
   res.setHeader('Cache-Control', 'no-cache');

package-lock.json

@@ -38,6 +38,7 @@
     "country-code-lookup": "0.0.16",
     "emoji-flags": "^1.2.0",
     "express": "^4.17.1",
+    "helmet": "^3.21.3",
     "humanize-number": "0.0.2",
     "lodash": "^4.17.15",
     "moment": "^2.24.0",