HTTP Helmet

easily add CSP and other security headers to your web application.

Install

``sh


npm


npm i @mcansh/http-helmet
`

Usage

basic example using @mjackson/node-fetch-server

`js
import * as http from "node:http";
import { createRequestListener } from "@mjackson/node-fetch-server";
import { createNonce, createSecureHeaders } from "@mcansh/http-helmet";

let html = String.raw;

let handler = (request) => {
let nonce = createNonce();
let headers = createSecureHeaders({
"Content-Security-Policy": {
defaultSrc: ["'self'"],
scriptSrc: ["'self'", 'nonce-${nonce}'],
},
});

headers.append("content-type", "text/html");

return new Response(
html




name="viewport"
content="width=device-width, initial-scale=1.0"
/>

Hello World

,
{ headers },
);
};

let server = http.createServer(createRequestListener(handler));

server.listen(3000);

console.log("✅ app ready: http://localhost:3000");
``