From 25c8f210ca258a25c79c7f5864ca11bbdcb5e954 Mon Sep 17 00:00:00 2001 From: chaosBreaking Date: Wed, 9 Oct 2019 11:04:15 +0800 Subject: [PATCH] =?UTF-8?q?=E5=8A=A0=E5=85=A5helmet=E4=B8=AD=E9=97=B4?= =?UTF-8?q?=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- package.json | 1 + src/app.js | 1 + 2 files changed, 2 insertions(+) diff --git a/package.json b/package.json index 10d2df4..605f79d 100644 --- a/package.json +++ b/package.json @@ -37,6 +37,7 @@ "ethers": "^4.0.36", "etherscan-api": "^10.0.4", "express": "^4.17.1", + "helmet": "^3.21.1", "js-sha3": "^0.8.0", "jsonwebtoken": "^8.5.1", "mongodb": "^3.3.0-beta2", diff --git a/src/app.js b/src/app.js index 698a5b7..ca8729b 100644 --- a/src/app.js +++ b/src/app.js @@ -10,6 +10,7 @@ app.use(require('body-parser').json({ limit: '50mb', extended: true })); // 用 app.use(require('cors')()); app.use(require('compression')()); app.use(require('express').static(path.join(__dirname, '../dist'), { index: 'index.html' })); // 可以指定到 node应用之外的目录上。windows里要把 \ 换成 /。 +app.use(require('helmet')); app.all('*', function(req, res, next) { res.setHeader('Access-Control-Expose-Headers', 'token');