INSTALL
npm install @btpns/security
please add file in => src/config/config.json
HTTP HELMET
HTTP Helmet helps you secure your apps by setting various HTTP headers. For more information: https://github.com/helmetjs/helmet
CONFIG
please add string httpHelmet as key object. Module exist in httpHelmet:
| Module | Default |
|---|---|
| contentSecurityPolicy for setting Content Security Policy | |
| crossdomain for handling Adobe products' crossdomain requests | |
| dnsPrefetchControl controls browser DNS prefetching | ✓ |
| expectCt for handling Certificate Transparency | |
| featurePolicy to limit your site's features | |
| noCache to disable client-side caching |
HOW TO USE
apply in as global middleware in nest:
app.use(helmet())RATE LIMITER
Rate Limiter to protect your applications from brute-force attacks. For more information: https://github.com/nfriedly/express-rate-limit
PARAMETER
--handler (optional) The function to handle requests once the max limit is exceeded. It receives the request and the response objects. The next param is available if you need to pass to the next middleware. The req.rateLimit object has limit, current, and remaining number of requests and, if the store provides it, a resetTime Date object. Defaults to:
function (req, res, next) {
res.status(429).send(message);
}
### CONFIG
please add string `rateLimiter` as key object. Variable in rateLimiter:
--`max` (must be number) => max connection during windowMs milliseconds before sending http sattus 429 response. Defaults to 5. Set 0 disable.
--`windowMs` (must be number) => how long in milliseconds to keep records of requests in memory. Defaults to 60000 (1 minute).
--`message` (must be string OR json object) => error message that sent when max is exceeded. Defaults to 'Too many requests, please try again later.'
HOW TO USE
apply in as global middleware in nest:
app.use(rateLimiter())CSRF
CSRF helps you to secure unauthorized commands are transmitted from a user that the web application trusts. For more information: https://github.com/expressjs/csurf
HOW TO USE
apply in as global middleware in nest:
app.use(csrf())