cf-workers-helmet v1.0.3

cf-workers-helmet

cf-workers-helmet is a wrapper for helmet to work with Cloudflare Workers. It provides important security headers to make your app more secure by default. cf-workers-helmet has been heavily inspired by koa-helmet.

Installation

npm install cf-workers-helmet --save

Usage

Usage is the same as helmet.

Helmet is a collection of 11 smaller middleware functions that set HTTP response headers.

You can see more in the documentation.

Example

import Helmet from 'cf-workers-helmet';
import {getAssetFromKV} from '@cloudflare/kv-asset-handler';

let helmet = new Helmet();

addEventListener('fetch', event => {
    event.respondWith(serverResponse(event));
});

async function serverResponse(event) {
    try {
        let response = await handleEvent(event);

        return helmet(event.request, response);
    } catch (e) {
        return new Response('Internal Error', {
            status: 500
        });
    }
}

async function handleEvent(event) {
    try {
        return await getAssetFromKV(event)
    } catch (e) {
        let pathname = new URL(event.request.url).pathname;

        return new Response(`"${pathname}" not found`, {
            status: 404,
            statusText: 'not found',
        });
    }
}