@tekir/shield

Installation

Features

• CSRF token generation and validation
• Content Security Policy with presets
• Helmet-style security headers (HSTS, X-Frame, etc.)
• XSS sanitization: sanitize(), escapeHtml()
• Rate limit header helpers
• Composable shield() middleware

Quick Example

import { shield, csrf, helmet, csp } from '@tekir/shield'

app.router.use(shield())

// Or compose individually
app.router.use(csrf())
app.router.use(helmet())
app.router.use(csp({ directives: { defaultSrc: ["'self'"] } }))

Changelog