DEV Community

Discussion on: How to make your express API more secure with helmet

Collapse
 
octaneinteractive profile image
Wayne Smallman

Hi Gabriel, great introduction.

I'm also using Helmet, and have:

app.use(helmet())
app.disable('x-powered-by')
Collapse
 
gabrielrufino profile image
Gabriel Rufino

Did you know that the helmet already deactivates the x-powered-by header? Thank you for your feedback bro :D

Collapse
 
octaneinteractive profile image
Wayne Smallman

It could be that I'm using a version that didn't do it by default.