csp-header-middleware
csp-header-middlewareis a middleware to add CSP headers to response to prevent XSS attacks.
Installation
npm install csp-header-middleware
How to use ?
var express = require('express')
var bodyParser = require('body-parser')
//NOTE: Don't forget to import `.cspHeaders` from lib
var cspHeaders = require('csp-header-middleware').cspHeaders;
var app = express()
app.use(bodyParser.json())
// this should comes before any routes
app.use(cspHeaders())
app.post('/your-route', (req, res) => {
// response will be added with csp header
})
Testing & Contributing
npm install
npm test
