fastify-xss-filter

Fastify plugin to set the X-XSS-Protection header.

Why?

You may know x-xss-protection as a xss filter middleware used in helmet. And you could use it as a middleware in fastify also. So why i made this plugin?

You may find the reason in benchmark result and wish you like it. :)

Difference

This plugin has passed all x-xss-protection test cases. And no difference in options.

Install

Via npm:

npm i fastify-xss-filter

Via yarn:

yarn add fastify-xss-filter

Usage

const fastify = require('fastify');
const fastifyXssFilter = require('fastify-xss-filter');
 
const app = fastify();
app.register(fastifyXssFilter, {
  // Your options
});
 
app.listen(3000, err => {
  if (err) throw err;
});

Option

This plugin has the same options as helmet.

reportUri {string}

Set report URI in header, you may find more detail here.

setOnOldIE {boolean}

Force to set header for IE whos version under 9. Default is false.

Changelog

• 0.2.0:
  • Add test case
  • Add code coverage
  • Add benchmarks
• 0.1.0:
  • Init version