CODEWITHSUNDEEP
node.jsexpresssecurityhelmet.js
Pratik Thube
Pratik Thube

Reputation: 134

Use of helmetjs when we can directly set set HTTP related header

I come across helmetjs in Production Best Practices: Security Express doc here curious to know how it is different than setting headers directly. Also visited helmetjs documentation, I found only how to use it, I want to know how it works and how it is a secure way of setting HTTP related headers (i.e frameguard). Thank you in advance.

Upvotes: 0

Views: 760

Answers (1)

Evan Hahn
Evan Hahn

Reputation: 12722

Helmet makes setting the headers easier. It puts them all in one place, gives them an API, does some validation, and documents everything.

However, it's not much more than that. If you know how to set the headers yourself and understand their ins and outs, Helmet isn't going to be too useful.

(I'm Helmet's maintainer, for what it's worth!)

Upvotes: 1

Related Questions