From bad091e6f4bf01e862986e5a16e1ea474c90ea62 Mon Sep 17 00:00:00 2001 From: NahomAlemu Date: Fri, 13 Mar 2026 22:09:44 -0700 Subject: [PATCH] add helmet --- nsc-events-nestjs/package.json | 1 + nsc-events-nestjs/src/main.ts | 4 ++++ package-lock.json | 10 ++++++++++ 3 files changed, 15 insertions(+) diff --git a/nsc-events-nestjs/package.json b/nsc-events-nestjs/package.json index 0663ee3..0aab146 100644 --- a/nsc-events-nestjs/package.json +++ b/nsc-events-nestjs/package.json @@ -41,6 +41,7 @@ "date-fns": "3.6.0", "google-auth-library": "^9.15.1", "googleapis": "^146.0.0", + "helmet": "^8.1.0", "jwt-decode": "^4.0.0", "nest-winston": "^1.10.0", "passport": "0.6.0", diff --git a/nsc-events-nestjs/src/main.ts b/nsc-events-nestjs/src/main.ts index 984dce9..d687bbb 100644 --- a/nsc-events-nestjs/src/main.ts +++ b/nsc-events-nestjs/src/main.ts @@ -2,10 +2,14 @@ import { NestFactory } from '@nestjs/core'; import { AppModule } from './app.module'; import { ValidationPipe } from '@nestjs/common'; import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger'; +import helmet from 'helmet'; async function bootstrap() { const app = await NestFactory.create(AppModule); + // Security middleware - adds various HTTP headers for protection + app.use(helmet()); + app.setGlobalPrefix('api'); app.useGlobalPipes(new ValidationPipe()); app.enableCors({ diff --git a/package-lock.json b/package-lock.json index 92df205..6fdc34b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -11771,6 +11771,15 @@ "node": ">= 0.4" } }, + "node_modules/helmet": { + "version": "8.1.0", + "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz", + "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==", + "license": "MIT", + "engines": { + "node": ">=18.0.0" + } + }, "node_modules/hoist-non-react-statics": { "version": "3.3.2", "resolved": "https://registry.npmjs.org/hoist-non-react-statics/-/hoist-non-react-statics-3.3.2.tgz", @@ -19829,6 +19838,7 @@ "date-fns": "3.6.0", "google-auth-library": "^9.15.1", "googleapis": "^146.0.0", + "helmet": "^8.1.0", "jwt-decode": "^4.0.0", "nest-winston": "^1.10.0", "passport": "0.6.0",