Q43: What is Helmet.js and why should Express applications use it?
Helmet.js is Express security middleware that sets various HTTP response headers (like Content-Security-Policy, X-Frame-Options, X-Content-Type-Options) to guard against common web vulnerabilities.
Key Takeaways
- Secures HTTP headers automatically in Express apps.
- Mitigates attacks like clickjacking, XSS, and MIME sniffing.
Knowledge Check
Which security risk is mitigated by setting X-Frame-Options via Helmet?