Learn about the Helmet library of Node.js for HTTP headers and test the security.

Web App Security

This module teaches us hands-on practical use of HTTP security headers as browser security controls to help secure web applications. 
For each HTTP security header that can enhance our web application security, we'll look at the potential risk of not implementing it as well as the benefits of employing a solution that we propose. Finally, we'll learn how to implement and configure the security header with Helmet, a popular and well-maintained Node.js package on npm.

Web Application Security: Understanding HTTP Security Headers

HTTP security headers are a generic tool that can be employed by any technology at the HTTP medium including load balancers,  API gateways, reverse proxies, and web application frameworks.

If you're building Node.js web applications with the help of [Express](http://expressjs.com), then [Helmet](https://helmetjs.github.io) is the go-to npm module to use.

[Helmet](https://helmetjs.github.io) is an open source project consisting of a collection of Express middleware functions that in turn configure HTTP headers by setting the HTTP response object accordingly.

In this lesson, we'll get acquainted with the Helmet npm package to set HTTP security headers for Express web applications.

Introduction

HTTP Security Headers

Testing for Security Headers

What's Next

Conclusion

Helmet - a Node.js Package for HTTP Security Headers