Remove X-Powered-By header

This commit is contained in:
Jake Howard 2018-01-17 20:03:41 +00:00
parent e3d5406d27
commit ef9b100dd1
Signed by: jake
GPG key ID: 57AFB45680EDD477

View file

@ -15,13 +15,10 @@ import handle404 from './middleware/404';
import { Options } from './types'; import { Options } from './types';
const PKG = require('../package.json');
export default function createServer(opts : Options) : express.Application { export default function createServer(opts : Options) : express.Application {
const app = express(); const app = express();
app.use(helmet()); app.use(helmet());
app.use(helmet.hidePoweredBy({setTo: `tstatic ${PKG.version}`}));
app.use(helmet.ieNoOpen()); app.use(helmet.ieNoOpen());
app.use(helmet.noCache()); app.use(helmet.noCache());
app.use(referrerPolicy({ policy: 'same-origin' })); app.use(referrerPolicy({ policy: 'same-origin' }));