keep enable Cache-Control

helmet.defaults() disabeles Cache-Control. I guess it's controversial to disable it.
meanjs · Mar 30, 2014 · 72c813d · 72c813d
1 parent afb0f97
commit 72c813d
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/config/express.js b/config/express.js
@@ -99,7 +99,11 @@ module.exports = function(db) {
 	// connect flash for flash messages
 	app.use(flash());
 
-	app.use(helmet.defaults());
+	app.use(helmet.xframe());
+	app.use(helmet.iexss());
+	app.use(helmet.contentTypeOptions());
+	app.use(helmet.ienoopen());
+	app.disable('x-powered-by');
 
 	// routes should be at the last
 	app.use(app.router);