feat: Add Helmet for enhanced HTTP security headers

Gi-jutsu · Dec 5, 2024 · 853460d · 853460d
1 parent a08859f
commit 853460d
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/package.json b/package.json
@@ -44,6 +44,7 @@
     "class-validator": "^0.14.1",
     "cookie-parser": "^1.4.7",
     "drizzle-orm": "^0.36.4",
+    "helmet": "^8.0.0",
     "jsonwebtoken": "^9.0.2",
     "luxon": "^3.5.0",
     "nestjs-cls": "^4.4.1",

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/src/main.ts b/src/main.ts
@@ -1,11 +1,13 @@
 import { ValidationPipe } from "@nestjs/common";
 import { NestFactory } from "@nestjs/core";
 import cookieParser from "cookie-parser";
+import helmet from "helmet";
 import { fileURLToPath } from "node:url";
 import { ApplicationModule } from "./application.module.js";
 
 export async function bootstrap() {
   const application = await NestFactory.create(ApplicationModule);
+  application.use(helmet());
   application.enableShutdownHooks();
   application.use(cookieParser());
   application.useGlobalPipes(new ValidationPipe());