TIMEX TIMEX - 4 months ago 11
Javascript Question

In Node.js/Express, how do I automatically add this header to every "render" response?

I have many of these "controllers":

app.get('/',function(req,res){
var stuff = { 'title': 'blah' };
res.render('mytemplate',stuff);
});


Notice res.render? I want to add this header to every response header I make:

X-XSS-Protection: 0


How can I add that response header automatically?

Answer
// global controller
app.get('/*',function(req,res,next){
    res.header('X-XSS-Protection' , 0 );
    next(); // http://expressjs.com/guide.html#passing-route control
});

Just make sure this is the first controller you add, order is significant.