Should we use Helmet middleware with Express app running on Firebase Cloud Function?What is Node.js' Connect, Express and “middleware”?Cloud Functions for Firebase and ExpressRouting with express and consign in Firebase Cloud FunctionsExport excel with Cloud Functions for Firebase using spark (free) firebase planGoogle Cloud Functions + Android appExpress app using firebase functionsExpress routes and middleware with Firebase Cloud Functionsintercept firebase-functions response (middleware)Declare separate Firebase Cloud Functions and still use Express.jsExpress in Google Cloud Functions
Cheap storage lockers in Tromsø, Norway
Gofer work in exchange for Letter of Recommendation
Has there ever been a truly bilingual country prior to the contemporary period?
Is a butterfly one or two animals?
Symlink to directory for easy access: .bashrc, usr/local/bin, something else?
How can I pack my food so it doesn't smell?
Use of vor in this sentence
Can I submit a paper to a computer science conference using an alias if using my real name can cause legal trouble in my original country
Interaction between Ethereal Absolution versus Edgar Markov with Captivating Vampire
Levenshtein Neighbours
How do you call it when two celestial bodies come as close to each other as they will in their current orbits?
Are unaudited server logs admissible in a court of law?
Do predators tend to have vertical slit pupils versus horizontal for prey animals?
Why doesn't the Falcon-9 first stage use three legs to land?
Unity: transform.LookAt(target) not "looking at" target?
Are there any legal requirements concerning airline pilots and their watches?
Are objects subject to critical hits?
How does the Saturn V Dynamic Test Stand work?
!I!n!s!e!r!t! !n!b!e!t!w!e!e!n!
How do slats reduce stall speed?
How could China have extradited people for political reason under the extradition law it wanted to pass in Hong Kong?
Can my Boyfriend, who lives in the UK and has a Polish passport, visit me in the USA?
"Silverware", "Tableware", and "Dishes"
How do neutron star binaries form?
Should we use Helmet middleware with Express app running on Firebase Cloud Function?
What is Node.js' Connect, Express and “middleware”?Cloud Functions for Firebase and ExpressRouting with express and consign in Firebase Cloud FunctionsExport excel with Cloud Functions for Firebase using spark (free) firebase planGoogle Cloud Functions + Android appExpress app using firebase functionsExpress routes and middleware with Firebase Cloud Functionsintercept firebase-functions response (middleware)Declare separate Firebase Cloud Functions and still use Express.jsExpress in Google Cloud Functions
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
I have built my first express app after reading documentation and watching many tutorials. I want to run it with Firebase Http Function. Express docs are recommending Helmet middleware for security reasons and I can see why. There are no examples using it with Firebase (at least I can't find).
So my question is should we use Helmet middleware with Firebase Http functions? Is it recommended?
Using Express app is not mandatory with Firebase Functions and all the traffic is going through Google servers so I think it is not necessary as Google is taking care of the security issues Helmet should but I am not sure. There is no information about it in Firebase docs.
node.js firebase express google-cloud-functions helmet.js
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
add a comment |
I have built my first express app after reading documentation and watching many tutorials. I want to run it with Firebase Http Function. Express docs are recommending Helmet middleware for security reasons and I can see why. There are no examples using it with Firebase (at least I can't find).
So my question is should we use Helmet middleware with Firebase Http functions? Is it recommended?
Using Express app is not mandatory with Firebase Functions and all the traffic is going through Google servers so I think it is not necessary as Google is taking care of the security issues Helmet should but I am not sure. There is no information about it in Firebase docs.
node.js firebase express google-cloud-functions helmet.js
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
add a comment |
I have built my first express app after reading documentation and watching many tutorials. I want to run it with Firebase Http Function. Express docs are recommending Helmet middleware for security reasons and I can see why. There are no examples using it with Firebase (at least I can't find).
So my question is should we use Helmet middleware with Firebase Http functions? Is it recommended?
Using Express app is not mandatory with Firebase Functions and all the traffic is going through Google servers so I think it is not necessary as Google is taking care of the security issues Helmet should but I am not sure. There is no information about it in Firebase docs.
node.js firebase express google-cloud-functions helmet.js
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
I have built my first express app after reading documentation and watching many tutorials. I want to run it with Firebase Http Function. Express docs are recommending Helmet middleware for security reasons and I can see why. There are no examples using it with Firebase (at least I can't find).
So my question is should we use Helmet middleware with Firebase Http functions? Is it recommended?
Using Express app is not mandatory with Firebase Functions and all the traffic is going through Google servers so I think it is not necessary as Google is taking care of the security issues Helmet should but I am not sure. There is no information about it in Firebase docs.
node.js firebase express google-cloud-functions helmet.js
node.js firebase express google-cloud-functions helmet.js
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
edited Mar 27 at 17:20
Dave
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
asked Mar 27 at 12:36
DaveDave
1,3038 silver badges20 bronze badges
1,3038 silver badges20 bronze badges
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Helmet is just a collection of 13 smaller middleware (see Helmet's docs for the full list—that number may change in the future). Each of these set one or more HTTP response headers related to security. Some of this stuff is only applicable in browsers (such as the ieNoOpen middleware) while others can be used outside of a browser context.
If these headers would improve the security of whatever user-agent makes HTTP requests to your Firebase, you should use Helmet.
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55377358%2fshould-we-use-helmet-middleware-with-express-app-running-on-firebase-cloud-funct%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Helmet is just a collection of 13 smaller middleware (see Helmet's docs for the full list—that number may change in the future). Each of these set one or more HTTP response headers related to security. Some of this stuff is only applicable in browsers (such as the ieNoOpen middleware) while others can be used outside of a browser context.
If these headers would improve the security of whatever user-agent makes HTTP requests to your Firebase, you should use Helmet.
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
add a comment |
Helmet is just a collection of 13 smaller middleware (see Helmet's docs for the full list—that number may change in the future). Each of these set one or more HTTP response headers related to security. Some of this stuff is only applicable in browsers (such as the ieNoOpen middleware) while others can be used outside of a browser context.
If these headers would improve the security of whatever user-agent makes HTTP requests to your Firebase, you should use Helmet.
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
add a comment |
Helmet is just a collection of 13 smaller middleware (see Helmet's docs for the full list—that number may change in the future). Each of these set one or more HTTP response headers related to security. Some of this stuff is only applicable in browsers (such as the ieNoOpen middleware) while others can be used outside of a browser context.
If these headers would improve the security of whatever user-agent makes HTTP requests to your Firebase, you should use Helmet.
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
Helmet is just a collection of 13 smaller middleware (see Helmet's docs for the full list—that number may change in the future). Each of these set one or more HTTP response headers related to security. Some of this stuff is only applicable in browsers (such as the ieNoOpen middleware) while others can be used outside of a browser context.
If these headers would improve the security of whatever user-agent makes HTTP requests to your Firebase, you should use Helmet.
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
answered Mar 28 at 14:38
Evan HahnEvan Hahn
7,0655 gold badges26 silver badges38 bronze badges
7,0655 gold badges26 silver badges38 bronze badges
add a comment |
add a comment |
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Got a question that you can’t ask on public Stack Overflow? Learn more about sharing private information with Stack Overflow for Teams.
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55377358%2fshould-we-use-helmet-middleware-with-express-app-running-on-firebase-cloud-funct%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
