Upgrading Helmet to the next major version about server HOT 3 CLOSED

Sorry I don't have the time/energy to do this right now, might revisit in the future

from server.

Hi @EvanHahn, thank you so much for reaching out! Should I expect some security issue alongside which might force a quick release, or is it just a routine release? Is this a breaking change as the major version seems to indicate? Even if it's a breaking change, depending on the defaults of Server.js it might still be non-breaking, so would love to read a bit about the changes. Is v4 the "Unreleased" notice here?

from server.

At a high level: Helmet 4 changes some defaults and removes some deprecated middlewares and options. There's a minor security boost for old browsers with the X-XSS-Protection header.

You can see more detail in helmetjs/helmet#197.

I'm happy to figure out whether this is a breaking change for you if helpful!

from server.