From dbcf9c4f829925c00ab5c6f9064bbb3ce0b78af0 Mon Sep 17 00:00:00 2001 From: Evan Hahn Date: Mon, 31 Jan 2022 09:00:51 -0600 Subject: [PATCH] Tweak `X-Powered-By` documentation See [#353][0] for discussion. [0]: https://github.com/helmetjs/helmet/pull/353 --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d4f90f6..359de15 100644 --- a/README.md +++ b/README.md @@ -579,7 +579,7 @@ You can install this module separately as `helmet-crossdomain`. This middleware takes no options. -If you're using Express, this middleware will work, but you should use `app.disable("x-powered-by")` instead. +Note: [Express has a built-in way to disable the `X-Powered-By` header](https://stackoverflow.com/a/12484642/804100), which you may wish to use instead of this middleware. Examples: