wassname/DefinitelyTyped
1
0
Fork 0
mirror of https://github.com/wassname/DefinitelyTyped.git synced 2026-08-20 12:00:53 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8818 from EvanHahn/helmet-xssFilter-improvements

Browse Source 
Improve Helmet's xssFilter options
This commit is contained in:
Masahiro Wakame
2016-04-06 01:16:35 +09:00
parent cb5ace8235 70262bcb3e
commit 9d9bd17073
2 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helmet/helmet-tests.ts
+2
View File
@@ -17,6 +17,8 @@ function helmetTest() {
*/
function xssFilterTest() {
app.use(helmet.xssFilter());
app.use(helmet.xssFilter({}));
app.use(helmet.xssFilter({ setOnOldIE: false }));
app.use(helmet.xssFilter({ setOnOldIE: true }));
}
helmet/helmet.d.ts
Vendored
+7 -3
View File
@@ -24,7 +24,11 @@ declare module "helmet" {
disableAndroid? : boolean;
directives? : IHelmetCspDirectives
}
interface IHelmetXssFilterConfiguration {
setOnOldIE? : boolean;
}
/**
* @summary Interface for helmet class.
* @interface
@@ -82,11 +86,11 @@ declare module "helmet" {
publicKeyPins(options ?: Object):express.RequestHandler;
/**
* @summary Prevent Cross-site scripting attacks.
* @summary Mitigate cross-site scripting attacks with the "X-XSS-Protection" header.
* @return {RequestHandler} The Request handler.
* @param {Object} options The options.
*/
xssFilter(options ?: Object):express.RequestHandler;
xssFilter(options ?: IHelmetXssFilterConfiguration):express.RequestHandler;
/**
* @summary Set policy around third-party content via headers