added helmet in server.js (#1674)

Co-authored-by: Kevin Yang <kevinyang@Kevins-RCMP-MacBook-Pro.local> Co-authored-by: ngosset <norman.gosset@cds-snc.ca>
cds-snc · Mar 17, 2020 · 20a0a1d · 20a0a1d
1 parent 19ba926
commit 20a0a1d
Show file tree

Hide file tree

Showing 3 changed files with 138 additions and 0 deletions.
diff --git a/f2/package-lock.json b/f2/package-lock.json
diff --git a/f2/package.json b/f2/package.json
@@ -23,6 +23,7 @@
     "final-form": "^4.18.7",
     "formidable": "^1.2.1",
     "get-user-locale": "^1.3.0",
+    "helmet": "^3.21.3",
     "isomorphic-unfetch": "^3.0.0",
     "ldapjs": "^1.0.2",
     "mongodb": "^3.5.3",

diff --git a/f2/server.js b/f2/server.js
@@ -16,6 +16,7 @@ const {
   submitFeedback,
 } = require('./src/utils/notify')
 const { formatAnalystEmail } = require('./src/utils/formatAnalystEmail')
+const helmet = require('helmet')
 
 // set up rate limiter: maximum of 100 requests per minute (about 12 page loads)
 var RateLimit = require('express-rate-limit')
@@ -38,6 +39,7 @@ const uidList = process.env.LDAP_UID
 getAllCerts(uidList)
 
 const app = express()
+app.use(helmet())
 
 const allowedOrigins = [
   'https://dev.antifraudcentre-centreantifraude.ca',