Skip to content

Issues: helmetjs/helmet

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
0 Open 309 Closed
0 Open 309 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Wasm Unsafe Eval is rejected as valid script-src directive
#482 by discoverlance-com was closed Mar 17, 2025
2
Strict-Transport-Security header max-age default
#479 by kristinademeshchik was closed Feb 13, 2025
1
What have change in helmet 8.0.0 ?
#476 by Nick390 was closed Oct 25, 2024
1
is SSLPinning deprecated from latest versions?
#472 by saranrajui was closed Aug 28, 2024
3
error is always undefined
#471 by singh-inder was closed Jun 28, 2024
2
Request to add Permissions-Policy header needs more information
#470 by ashgw was closed Jul 11, 2024
2
csp header lack script-src-elem needs more information
#466 by Pomax was closed Jun 3, 2024
4
Content-Security-Policy getDefaultDirectives should return a deep copy good starter task
#463 by EvanHahn was closed Apr 29, 2024 v8.0.0
3
Strict-Transport-Security middleware should throw, not warn, when misspelling "includeSubDomains" option good starter task
#462 by EvanHahn was closed Apr 28, 2024 v8.0.0
2
helmet default directives doesnt match helmet-csp default directives
#461 by NihilumPlays was closed Jun 1, 2024
@EvanHahn
3
Increase default Strict-Transport-Security maxAge to 1 year good starter task
#457 by webketje was closed Apr 27, 2024 v8.0.0
3
Getting Name of Blocked Script?
#456 by VikR1000 was closed Apr 10, 2024
3
'self' and 'none' values lack quotes
#454 by DougReeder was closed Apr 27, 2024 v8.0.0
@EvanHahn
4
Error "script-src-elem" is an invalid directive needs more information
#452 by nck was closed Feb 15, 2024
3
Disable HSTS headers by default on localhost
#451 by wesleytodd was closed Feb 17, 2024
@EvanHahn
9
7.1.0 Rollup error needs more information
#449 by khteh was closed Jan 16, 2024
17
Support unsafe-none in helmet.crossOriginEmbedderPolicy?
#446 by mxxk was closed Nov 5, 2023
1
1
Require Node 18+
#444 by EvanHahn was closed Jan 18, 2024
3 tasks done
v8.0.0
1
@njmulsqb
5
X-Powered-By is not being removed from the haeder in default mode needs more information
#440 by vanimarcos was closed Oct 12, 2023
2
Consider limiting helmet to document requests or add a note
#436 by mariomc was closed Jul 8, 2024
@EvanHahn
5
Jest: Cannot find module 'helmet' or its corresponding type declarations needs more information
#435 by thorstenfleischmann was closed Aug 18, 2023
3
Wiki code sample mistake
#426 by gricey432 was closed May 18, 2023
1
Cannot find module 'helmet' or its corresponding type declarations needs more information
#424 by jmd9019 was closed May 15, 2023
8
Unable to Prevent Clickjacking from Local File Protocol in Helmet-Protected Website needs more information
#422 by jonidelv was closed Apr 13, 2023
2
[6.1.4] typescript 5.0.4 still unhappy with how exports look export assignment
#419 by ritschwumm was closed Apr 11, 2023
@EvanHahn
15
ProTip! Adding no:label will show everything without a label.