add helmet

server/package.json

@@ -18,6 +18,7 @@
     "@types/express": "^4.17.17",
     "@types/express-rate-limit": "^6.0.0",
     "@types/express-session": "^1.17.6",
+    "@types/helmet": "^4.0.0",
     "@types/node": "^18.14.4",
     "@types/passport": "^1.0.12",
     "@types/passport-local": "^1.0.35",
@@ -37,6 +38,7 @@
     "express-openid-connect": "^2.12.1",
     "express-rate-limit": "^6.7.0",
     "express-session": "^1.17.3",
+    "helmet": "^6.0.1",
     "idb-keyval": "^6.2.0",
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.0.1",

server/src/index.ts

@@ -49,6 +49,9 @@ export default class ChatServer {
     }
 
     async initialize() {
+        const { default: helmet } = await import('helmet');
+        this.app.use(helmet());
+
         this.app.use(express.urlencoded({ extended: false }));
 
         if (process.env.AUTH0_CLIENT_ID && process.env.AUTH0_ISSUER && process.env.PUBLIC_URL) {