Skip to content

Commit

Permalink
Update docs: expectCt is no longer set by default
Browse files Browse the repository at this point in the history
Helmet v6 stopped including `expectCt` by default, but the README still
mentioned it.

See [#397][0] and [#398][1].

[0]: #397
[1]: #398
  • Loading branch information
thernstig authored and EvanHahn committed Feb 2, 2023
1 parent 151a7c5 commit a276e60
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions README.md
Expand Up @@ -74,7 +74,7 @@ app.use(

Helmet is [Express](https://expressjs.com) middleware. (It also works with [Connect](https://github.com/senchalabs/connect) or [no library at all](https://github.com/helmetjs/helmet/wiki/How-to-use-Helmet-without-Express)! If you need support for other frameworks or languages, [see this list](https://helmetjs.github.io/see-also/).)

The top-level `helmet` function is a wrapper around 15 smaller middlewares.
The top-level `helmet` function is a wrapper around 14 smaller middlewares.

In other words, these two code snippets are equivalent:

Expand All @@ -96,7 +96,6 @@ app.use(helmet.crossOriginEmbedderPolicy());
app.use(helmet.crossOriginOpenerPolicy());
app.use(helmet.crossOriginResourcePolicy());
app.use(helmet.dnsPrefetchControl());
app.use(helmet.expectCt());
app.use(helmet.frameguard());
app.use(helmet.hidePoweredBy());
app.use(helmet.hsts());
Expand Down

0 comments on commit a276e60

Please sign in to comment.