helmet - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

package.json

@@ -5,3 +5,3 @@ {
   "description": "Security header middleware collection for express",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "repository": {
@@ -8,0 +8,0 @@ "url": "git://github.com/andyet/helmet.git"

README.md

@@ -7,3 +7,10 @@ Express / Connect middleware that implement various security headers. [with sane defaults where applicable]
   - xframe (X-FRAME-OPTIONS)
+  - iexss (X-XSS-PROTECTION for IE8+)
 
+## Installation
+
+```
+npm install helmet
+```
+
 ## Basic Express Usage
@@ -100,6 +107,14 @@
 
+## X-XSS-PROTECTION
+
+The following example sets the X-XSS-PROTECTION: 1; mode=block header
+
+```javascript
+helmet.iexss();
+```
+
+
 ## To Be Implemented
 
   - HTTP Strict Transport Security
-  - X-XSS-Protection for IE
   - Warn when self, unsafe-inline or unsafe-eval are not single quoted
@@ -106,0 +121,0 @@ - Warn when unsafe-inline or unsafe-eval are used

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

9564

increased by2.29%

Lines of code

161

increased by1.26%

Number of lines in readme file

123

increased by13.89%

No dependency changes