Security Headers (Helmet)

Difficulty: Intermediate

Question

Name three HTTP security headers.

Answer

1. HSTS (forces HTTPS). 2. X-Frame-Options (prevents clickjacking). 3. Content-Security-Policy (restricts resource loading).

Concepts covered

Helmet, HSTS, X-Frame-Options, Content-Security-Policy