Add helmet and rate limiting

Author: luucvanderzee

app.js

@@ -3,11 +3,23 @@ var express = require("express");
 var path = require("path");
 var cookieParser = require("cookie-parser");
 var logger = require("morgan");
+var helmet = require("helmet");
 
 var indexRouter = require("./routes/index");
 
 var app = express();
 
+app.use(helmet());
+
+const RateLimit = require("express-rate-limit");
+const limiter = RateLimit({
+  windowMs: 1 * 60 * 1000, // 1 minute
+  max: 20,
+});
+
+// Apply rate limiter to all requests
+app.use(limiter);
+
 // view engine setup
 app.set("views", path.join(__dirname, "views"));
 app.set("view engine", "ejs");

package-lock.json

@@ -11,6 +11,8 @@
     "dotenv": "^16.4.5",
     "ejs": "~2.6.1",
     "express": "~4.16.1",
+    "express-rate-limit": "^7.4.0",
+    "helmet": "^7.1.0",
     "http-errors": "~1.6.3",
     "jose": "^5.6.3",
     "morgan": "~1.9.1",