Repository Issue Activity (beta)

#550 Opinionated defaults for API servers

#536 [docs] Readme should explain whether helmet is useful on a subroute

#543 Commes — a complementary package adding threat detection + post-quantum crypto to the Express security stack

#530 test

#343 After update issue ERR_BLOCKED_BY_RESPONSE

#223 Fetch Metadata Browser Headers

#511 Feature Request: Add Copy Button to Code Snippets

#351 Feature: CSP should allow simultaneous `Content-Security-Policy-Report-Only` and `Content-Security-Policy-Report-Only`

#504 Consider Adopting NPM Trusted Publishing

#501 permissionsPolicy is missing

#480 Don't upgrade insecure requests when the page is served over HTTP

#493 Align CSP with convention

#487 Can helmet merge with existing CSP header?

#481 Operational issues with Helmet

#482 Wasm Unsafe Eval is rejected as valid script-src directive

#479 Strict-Transport-Security header max-age default

#403 Option to update CSP during runtime

#134 It does not work with Express 4.14.0 ?

#460 remove block-all-mixed-content from helmet-csp default directives

#473 Dynamic Content Security Policy (CSP) Update with Helmet

#474 typescript issues

#404 CSP: document functions as directive values

#438 Deployment on Vercel using .mjs

#476 What have change in helmet 8.0.0 ?

#475 cannot use express-mongo-sanitize