Glossary term
What is helmet (helmet (npm package))?
helmet stands for helmet (npm package).
A Node package that sets a group of security response headers for you. You still need to tune the CSP and set cookie flags yourself.
Learn it properly · Security for DevelopersLesson 2: XSS, CSRF, Clickjacking and Security HeadersHow a script gets into your page and how to stop it with output encoding and CSP, how CSRF uses your cookies, SameSite and CSRF tokens, frame-ancestors, and the headers worth setting.