From e9eb6073c4bcec10a8dd22471444ec092c88ac4e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matt=C3=A9o=20Delabre?= <spam@delab.re>
Date: Sun, 29 Nov 2020 02:12:59 +0100
Subject: [PATCH] Add helmet

---
 app.mjs           | 2 ++
 package-lock.json | 5 +++++
 package.json      | 1 +
 3 files changed, 8 insertions(+)

diff --git a/app.mjs b/app.mjs
index e57a2e5..f71df24 100644
--- a/app.mjs
+++ b/app.mjs
@@ -1,4 +1,5 @@
 import express from 'express';
+import helmet from 'helmet';
 import path from 'path';
 import cookieParser from 'cookie-parser';
 import logger from 'morgan';
@@ -8,6 +9,7 @@ const thisdir = path.dirname(fileURLToPath(import.meta.url));
 const app = express();
 export default app;
 
+app.use(helmet());
 app.use(logger('dev'));
 app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
diff --git a/package-lock.json b/package-lock.json
index 1b5f7a2..f7aab65 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -183,6 +183,11 @@
       "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
       "integrity": "sha1-PYyt2Q2XZWn6g1qx+OSyOhBWBac="
     },
+    "helmet": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-4.2.0.tgz",
+      "integrity": "sha512-aoiSxXMd0ks1ojYpSCFoCRzgv4rY/uB9jKStaw8PkXwsdLYa/Gq+Nc5l0soH0cwBIsLAlujPnx4HLQs+LaXCrQ=="
+    },
     "http-errors": {
       "version": "1.6.3",
       "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz",
diff --git a/package.json b/package.json
index 012e192..151b8dd 100644
--- a/package.json
+++ b/package.json
@@ -9,6 +9,7 @@
     "cookie-parser": "~1.4.4",
     "debug": "~2.6.9",
     "express": "~4.16.1",
+    "helmet": "^4.2.0",
     "morgan": "~1.9.1",
     "node-fetch": "^2.6.1",
     "xml2js": "^0.4.23"