Files
Node.js-14-Cookbook/Chapter08/web-server-hardening/http-app/index.js
T
2017-07-31 11:33:31 +05:30

25 lines
659 B
JavaScript

const http = require('http')
const server = http.createServer((req, res) => {
secureHeaders(res)
switch (req.url) {
case '/': return res.end('hello world')
case '/users': return res.end('oh, some users!')
default: return error('404', res)
}
})
function secureHeaders (res) {
res.setHeader('X-DNS-Prefetch-Control', 'off')
res.setHeader('X-Frame-Options', 'SAMEORIGIN')
res.setHeader('X-Download-Options', 'noopen')
res.setHeader('X-Content-Type-Options', 'nosniff')
res.setHeader('X-XSS-Protection', '1; mode=block')
}
function error(code, res) {
res.statusCode = code
res.end(http.STATUS_CODES[code])
}
server.listen(3000)