Code files

Chapter08/web-server-hardening/http-app/index.js

@@ -0,0 +1,25 @@
+const http = require('http')
+
+const server = http.createServer((req, res) => {
+  secureHeaders(res)
+  switch (req.url) {
+    case '/': return res.end('hello world')
+    case '/users': return res.end('oh, some users!')
+    default: return error('404', res)
+  }
+})
+
+function secureHeaders (res) {
+  res.setHeader('X-DNS-Prefetch-Control', 'off')
+  res.setHeader('X-Frame-Options', 'SAMEORIGIN')
+  res.setHeader('X-Download-Options', 'noopen')
+  res.setHeader('X-Content-Type-Options', 'nosniff')
+  res.setHeader('X-XSS-Protection', '1; mode=block')
+}
+
+function error(code, res) {
+  res.statusCode = code
+  res.end(http.STATUS_CODES[code])
+}
+
+server.listen(3000)