Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
I believe the main reasons this project is stuck using Helmet 3 specifically is because of the following breaking changes:
helmet.noCache()
was removed.Please let me know if there are any other reasons Helmet was held back.
helmet.noCache()
I've added the dependency
nocache
to the project, the syntax has just changed a little but this can still be achieved with Helmet 4.X-Powered-By
This relates to the following issue and pull request.
Issue: freeCodeCamp/freeCodeCamp#40476
Pull Request: freeCodeCamp/freeCodeCamp#40900
On the same page, it's recommended not to use
app.use(helmet.hidePoweredBy())
and instead opt forapp.disable("x-powered-by")
, anyway.I updated the test to only verify that the
x-powered-by
header isn't equal toExpress
, this logic is stolen from a challenge before the projects.https://github.com/freeCodeCamp/freeCodeCamp/blob/main/curriculum/challenges/english/09-information-security/information-security-with-helmetjs/hide-potentially-dangerous-information-using-helmet.hidepoweredby.md#--hints--