keep enable Cache-Control

helmet.defaults() disabeles Cache-Control. I guess it's controversial to disable it.
This commit is contained in:
Yutaka Yamaguchi
2014-03-30 14:55:40 +09:00
parent afb0f973c8
commit 72c813d384

View File

@@ -99,7 +99,11 @@ module.exports = function(db) {
// connect flash for flash messages
app.use(flash());
app.use(helmet.defaults());
app.use(helmet.xframe());
app.use(helmet.iexss());
app.use(helmet.contentTypeOptions());
app.use(helmet.ienoopen());
app.disable('x-powered-by');
// routes should be at the last
app.use(app.router);