helmet

help secure Express/Connect apps with various HTTP headers
OpenBrowse Files
expresssecurityheadersbackendcontent-security-policycross-origin-embedder-policycross-origin-opener-policycross-origin-resource-policyorigin-agent-clusterreferrer-policystrict-transport-securityx-content-type-optionsx-dns-prefetch-controlx-download-optionsx-frame-optionsx-permitted-cross-domain-policiesx-powered-byx-xss-protection

guardly

Security helper methods for front-end development
OpenBrowse Files
backendcachecachingcertcertificateclickjackconnectcontentcontent-security-policycspcross-origin-embedder-policycross-origin-opener-policycross-origin-resource-policycsrfexpressframeheadershpkphstshttpskeymimetypenocachenoopenorigin-agent-clusterpinnipolicypowered-byreferrer-policysecuritysrisslstrict-transport-securityx-content-type-optionsx-dns-prefetch-controlx-download-optionsx-frame-optionsx-permitted-cross-domain-policiesx-powered-byx-xss-protectionxss

api-security-gateway

A security gateway for APIs with rate limiting, IP whitelisting, and injection prevention.
OpenBrowse Files
apirate limitingip whitelistinginjection preventionbackendcachecachingcertcertificateclickjackconnectcontentcontent-security-policycspcross-origin-embedder-policycross-origin-opener-policycross-origin-resource-policycsrfexpressframeheadershpkphstshttpskeymimetypenocachenoopenorigin-agent-clusterpinnipolicypowered-byreferrer-policysecuritysrisslstrict-transport-securityx-content-type-optionsx-dns-prefetch-controlx-download-optionsx-frame-optionsx-permitted-cross-domain-policiesx-powered-byx-xss-protectionxss

helmet-crossdomain

Set the X-Permitted-Cross-Domain-Policies header in Express apps
OpenBrowse Files
securityexpressconnectcrossdomain.xmlx-permitted-cross-domain-policiesflash