56 lines
1.6 KiB
Markdown
56 lines
1.6 KiB
Markdown
|
---
|
|||
|
|
id: 587d8249367417b2b2512c40
|
|||
|
|
title: Configure Helmet Using the ‘parent’ helmet() Middleware
|
|||
|
|
challengeType: 2
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
## Description
|
|||
|
|
<section id='description'>
|
|||
|
|
As a reminder, this project is being built upon the following starter project on <a href='https://glitch.com/#!/import/github/freeCodeCamp/boilerplate-infosec/'>Glitch</a>, or cloned from <a href='https://github.com/freeCodeCamp/boilerplate-infosec/'>GitHub</a>.
|
|||
|
|
app.use(helmet()) will automatically include all the middleware introduced above, except noCache(), and contentSecurityPolicy(), but these can be enabled if necessary. You can also disable or configure any other middleware individually, using a configuration object.
|
|||
|
|
// Example
|
|||
|
|
<code>app.use(helmet({</code>
|
|||
|
|
<code> frameguard: { // configure</code>
|
|||
|
|
<code> action: 'deny'</code>
|
|||
|
|
<code> },</code>
|
|||
|
|
<code> contentSecurityPolicy: { // enable and configure</code>
|
|||
|
|
<code> directives: {</code>
|
|||
|
|
<code> defaultSrc: ["self"],</code>
|
|||
|
|
<code> styleSrc: ['style.com'],</code>
|
|||
|
|
<code> }</code>
|
|||
|
|
<code> },</code>
|
|||
|
|
<code> dnsPrefetchControl: false // disable</code>
|
|||
|
|
<code>}))</code>
|
|||
|
|
We introduced each middleware separately for teaching purpose, and for ease of testing. Using the ‘parent’ helmet() middleware is easiest, and cleaner, for a real project.
|
|||
|
|
</section>
|
|||
|
|
|
|||
|
|
## Instructions
|
|||
|
|
<section id='instructions'>
|
|||
|
|
|
|||
|
|
</section>
|
|||
|
|
|
|||
|
|
## Tests
|
|||
|
|
<section id='tests'>
|
|||
|
|
|
|||
|
|
```yml
|
|||
|
|
tests:
|
|||
|
|
- text: no tests - it's a descriptive challenge
|
|||
|
|
testString: assert(true)
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
</section>
|
|||
|
|
|
|||
|
|
## Challenge Seed
|
|||
|
|
<section id='challengeSeed'>
|
|||
|
|
|
|||
|
|
</section>
|
|||
|
|
|
|||
|
|
## Solution
|
|||
|
|
<section id='solution'>
|
|||
|
|
|
|||
|
|
```js
|
|||
|
|
// solution required
|
|||
|
|
```
|
|||
|
|
</section>
|