Express application should use Helmet This product is not supported for your selected
Datadog site . (
).
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください 。
このルールを試す ID: javascript-express/missing-helmet
Language: JavaScript
Severity: Warning
Category: Security
CWE : 693
Description Per Express documentation :
Helmet can help protect your app from some well-known web vulnerabilities by setting HTTP headers appropriately.
This rule will check whether you’ve set app.use(helmet()) within the file that you’ve called express()
Non-Compliant Code Examples import express from 'express' ;
import helmet from 'helmet' ;
const MyController = express ();
MyController . listen ( 8000 );
const express = require ( "express" )
const app = express ();
// no `app.use(helmet())` helmet detected in the file
app . get ( "/foo" , ( req , res ) => res . send ( "foo" ));
app . listen ( 8000 );
Compliant Code Examples import express from 'express' ;
import helmet from 'helmet' ;
const MyController = express ();
MyController . use ( helmet ());
MyController . listen ( 8000 );
const express = require ( "express" )
const helmet = require ( "helmet" )
const app = express ();
app . use ( json ()); // helmet detected
app . use ( helmet ()); // helmet detected
app . get ( "/foo" , ( req , res ) => res . send ( "foo" ));
app . listen ( 8000 );
import express from "express"
import helmet from "helmet"
const app = express ();
app . use ( helmet ()); // helmet detected
app . get ( "/foo" , ( req , res ) => res . send ( "foo" ));
app . listen ( 8000 );
シームレスな統合。 Datadog Code Security をお試しください
