ajinabraham.njsscan.good_helmet_checks.helmet_header_x_powered_by

Author
1,129
Download Count*
License
Default X-Powered-By is removed or modified. More information: https://helmetjs.github.io/docs/hide-powered-by/
Run Locally
Run in CI
Defintion
rules:
- id: helmet_header_x_powered_by
message: "Default X-Powered-By is removed or modified. More information:
https://helmetjs.github.io/docs/hide-powered-by/"
languages:
- javascript
severity: INFO
patterns:
- pattern-not: |
$HELMET(..., {hidePoweredBy: false}, ...)
- pattern-either:
- pattern: |
$APP.use(helmet())
- pattern: |
app.disable('x-powered-by')
- pattern: |
helmet.hidePoweredBy(...)
- pattern: |
hidePoweredBy(...)
- pattern: |
helmet({hidePoweredBy: ...})
metadata:
license: LGPL-3.0-or-later
Short Link: https://sg.run/kX31