Libraries & frameworks
helmet
helmetjs/helmet
A Node/Express middleware that helps secure apps by setting HTTP response headers such as Content-Security-Policy and HSTS.
Topics
Related projects
DOMPurify17.5kDOMPurify is a fast, DOM-only XSS sanitizer for HTML, MathML and SVG. Distributed as an npm library, it strips dangerous markup and is easily configured with hooks, making it a widely used developer dependency for preventing cross-site scripting.
http-proxy-middleware11.1kA Node.js HTTP proxy middleware that forwards requests to a target with a single configuration, working with Express, Connect, Next.js, Hono, Fastify and other server frameworks.
vm24.1kAn in-process Node.js sandbox library that isolates untrusted JavaScript through proxies and module allowlists, letting applications execute external scripts with restricted access.
compression2.8kA Node.js compression middleware that compresses HTTP responses with gzip, deflate, and Brotli.
secure2.4kA Go HTTP middleware that adds security headers, HTTPS redirects, host allowlists and content security policies with a few lines of configuration.
secure1.1ksecure is a small, dependency-free Python library that applies consistent HTTP security headers across ASGI and WSGI web frameworks.