Updating To Helmet

config/express.js

@@ -10,6 +10,7 @@ var express = require('express'),
 	compress = require('compression'),
 	methodOverride = require('method-override'),
 	cookieParser = require('cookie-parser'),
+	helmet = require('helmet'),
 	passport = require('passport'),
 	mongoStore = require('connect-mongo')({
 		session: session
@@ -98,6 +99,13 @@ module.exports = function(db) {
 	// connect flash for flash messages
 	app.use(flash());
 
+	// Use helmet to secure Express headers
+	app.use(helmet.xframe());
+	app.use(helmet.iexss());
+	app.use(helmet.contentTypeOptions());
+	app.use(helmet.ienoopen());
+	app.disable('x-powered-by');
+
 	// Setting the app router and static folder
 	app.use(express.static(path.resolve('./public')));
 

package.json

@@ -27,6 +27,7 @@
 		"morgan": "~1.0.0",
 		"connect-mongo": "~0.4.0",
 		"connect-flash": "~0.1.1",
+		"helmet": "~0.2.1",
 		"consolidate": "~0.10.0",
 		"swig": "~1.3.2",
 		"mongoose": "~3.8.8",