From ef66a19e20593bc87a46d6cb66cf6f2978dddbe2 Mon Sep 17 00:00:00 2001
From: Kimmo Puputti <git@kimmo.kpuputti.fi>
Date: Thu, 12 Jan 2017 16:09:49 +0200
Subject: [PATCH] Use the helmet security middleware

---
 server/index.js | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/server/index.js b/server/index.js
index fcca2031..7641f9e5 100644
--- a/server/index.js
+++ b/server/index.js
@@ -17,6 +17,7 @@
 require('source-map-support').install();
 
 const express = require('express');
+const helmet = require('helmet');
 const path = require('path');
 const fs = require('fs');
 const _ = require('lodash');
@@ -75,6 +76,10 @@ function render(url, context) {
 const PORT = process.env.port || 4000;
 const app = express();
 
+// The helmet middleware sets various HTTP headers to improve security.
+// See: https://www.npmjs.com/package/helmet
+app.use(helmet());
+
 app.use('/static', express.static(path.join(buildPath, 'static')));
 
 app.get('*', (req, res) => {
@@ -95,5 +100,5 @@ app.get('*', (req, res) => {
 });
 
 app.listen(PORT, () => {
-  console.log(`Listening on port ${PORT}`);
+  console.log(`Listening to port ${PORT} in ${process.env.NODE_ENV} mode`);
 });