{"id":8535,"date":"2018-10-28T21:57:21","date_gmt":"2018-10-28T19:57:21","guid":{"rendered":"https:\/\/www.tomislavstankovic.com\/blog\/?p=8535"},"modified":"2019-01-05T19:45:49","modified_gmt":"2019-01-05T17:45:49","slug":"helmetjs-expressjs","status":"publish","type":"post","link":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/","title":{"rendered":"HelmetJS – za\u0161tita HTTP headera Express.js aplikacija"},"content":{"rendered":"

Sigurnost, jedna od stvari s kojoj svi prilikom razvoja aplikacije govore, ali ju malo njih smatra ozbiljnom ili odga\u0111a za kasnije. <\/p>\n

S druge strane, HTTP<\/em> headeri su ne\u0161to \u0161to korisnici Express.js<\/em> aplikacije ne vide i onda je developerima lako zapostaviti ih i gledati na njih kao na ne\u0161to nebitno. S obzirom da headeri daju razne informacije koje osobe s lo\u0161im namjerama mogu iskoristiti<\/strong> jasno je za\u0161to ipak treba voditi brigu o njima tj. informacijama koje pru\u017eaju.<\/p>\n

Jedna od tih informacije je X-Powered-By: Express<\/span> \u0161to web pregledniku govori \u0161to pokre\u0107e aplikaciju tj. na \u010demu se temelji. Helmet.js<\/em> \u0107e, izme\u0111u ostalog, sakriti ovu informaciju. <\/p>\n

Zato je cilj ovog blog posta pokazati kako na brz i jednostavan na\u010din za\u0161tititi Express.js<\/a><\/em> aplikaciju koriste\u0107i Helmet.js<\/a><\/em> koji ne\u0107e rije\u0161iti sve sigurnosne probleme, ali je ipak odli\u010dan po\u010detak<\/a>.<\/p>\n

\u0160to je Helmet.js?<\/h2>\n

Helmet.js<\/a><\/em> je kolekcija od 14 modula<\/strong> koje se brinu za sigurnost<\/strong> HTTP zaglavlja (headers)<\/a> to\u010dnije response<\/em> headera<\/a>.<\/p>\n

\"HelmetJS<\/a><\/p>\n

7 od 14 modula aktiviraju se jednom linijom koda<\/p>\n

app.use(helmet())<\/pre>\n
Osim toga, svaki od tih zadanih modula mogu\u0107e je individualno aktivirati<\/p>\n
app.use(helmet.noCache())\r\napp.use(helmet.frameguard())<\/pre>\n
ili deaktivirati<\/p>\n
app.use(helmet({\r\n  frameguard: false\r\n}))<\/pre>\n
Helmet.js moduli<\/h2>\n
Trenutno postoji 14 modula (defaultni ozna\u010deni sa (\u2713)), a to su sljede\u0107i:<\/p>\n
1.) contentSecurityPolicy<\/a><\/strong><\/p>\n
Sets the Content-Security-Policy header which can help protect against malicious injection of JavaScript, CSS, plugins, and more.<\/p><\/blockquote>\n
2.) crossdomain<\/a><\/strong><\/p>\n
Prevents Adobe Flash and Adobe Acrobat from loading content on your site.<\/p><\/blockquote>\n
3.) dnsPrefetchControl<\/a><\/strong> (\u2713)<\/p>\n
This middleware lets you disable browsers\u2019 DNS prefetching by setting the X-DNS-Prefetch-Control header.<\/p><\/blockquote>\n
4.) expectCt<\/a><\/strong><\/p>\n
Tells browsers to expect Certificate Transparency. For more about Certificate Transparency and this header, see this blog post<\/a> and the in-progress spec<\/a>.<\/p><\/blockquote>\n
5.) featurePolicy<\/a><\/strong><\/p>\n
Lets you restrict which browser features can be used. For example, you can disable fullscreen or vibration APIs.<\/p><\/blockquote>\n
6.) frameguard<\/a><\/strong> (\u2713)<\/p>\n
Frameguard mitigates clickjacking attacks by setting the X-Frame-Options header.<\/p><\/blockquote>\n
7.) hidePoweredBy<\/a><\/strong> (\u2713)<\/p>\n
Removes the X-Powered-By header to make it slightly harder for attackers to see what potentially-vulnerable technology powers your site.<\/p><\/blockquote>\n
8.) hpkp<\/a><\/strong><\/p>\n
Helps you set the Public-Key-Pins header to prevent person-in-the-middle attacks. Usage of this header (and therefore this middleware) is not recommended. Be very careful when deploying this\u2014you can easily misuse this header and cause problems. Chrome dropped support for HPKP citing risks of misuse.<\/p><\/blockquote>\n
9.) hsts<\/a><\/strong> (\u2713)<\/p>\n
This module sets the Strict-Transport-Security header to keep your users on HTTPS.<\/p><\/blockquote>\n
10.) ieNoOpen<\/a><\/strong> (\u2713)<\/p>\n
This middleware sets the X-Download-Options to prevent Internet Explorer from executing downloads in your site\u2019s context.<\/p><\/blockquote>\n
11.) noCache<\/a><\/strong><\/p>\n
Aims to disable browser caching by setting several headers.<\/p><\/blockquote>\n
12.) noSniff<\/a><\/strong> (\u2713)<\/p>\n
Helps prevent browsers from trying to guess (\u201csniff\u201d) the MIME type, which can have security implications. It does this by setting the X-Content-Type-Options header to nosniff.<\/p><\/blockquote>\n
13.) referrerPolicy<\/a><\/strong><\/p>\n
Can control the behavior of the Referer header by setting the Referrer-Policy header.<\/p><\/blockquote>\n
14.) xssFilter<\/a><\/strong> (\u2713)<\/p>\n
Sets the X-XSS-Protection header to prevent reflected XSS attacks.<\/p><\/blockquote>\n
Kreiranje projekta<\/h2>\n
Kreiram mapu projekta ExpressHelmet<\/strong> i unutar nje datoteku server.js<\/em><\/strong><\/p>\n
\"HelmetJS<\/a><\/p>\n
sa sljede\u0107im sadr\u017eajem:<\/p>\n
var express = require('express');\r\nvar app = express(); \r\n \r\nvar port = process.env.PORT || 8080;\r\n \r\nvar apiRoutes = express.Router();\r\n \r\napiRoutes.get('\/', function(req, res) {\r\n    res.json({ message: 'API radi!' }); \r\n});\r\n \r\n\/\/ ostale GET, POST, PUT, DELETE definiraju se u nstavku\r\n \r\n\/\/ sve rute sadr\u017eavaju '\/api'\r\napp.use('\/api', apiRoutes);\r\n \r\napp.listen(port);\r\nconsole.log('API je pokrenut i koristi port:' + ' ' + port);<\/pre>\n
Detalje o tome kako kreirati osnovni Express.js API<\/em> mogu\u0107e je prona\u0107i u blog postu pod naslovom Izrada RESTful API<\/em>-ja koriste\u0107i Node.js<\/em> i Express.js<\/em><\/a><\/p>\n
Ako sada pokrenem API<\/em> na adresi http:\/\/localhost:8080\/api unutar Google Chrome Developer alata<\/a><\/em> pod tabom Network<\/a><\/em> dobit \u0107u sljede\u0107e:<\/p>\n
\"HelmetJS<\/a><\/p>\n
Postavljanje Helmet.js-a<\/h2>\n
Sljede\u0107om naredbom untuar mape projekta instaliram Hellmet.js<\/a><\/em><\/p>\n
$ npm install helmet --save<\/pre>\n
Tako\u0111er, unutar server.js<\/strong><\/em> datoteke dodajem sljede\u0107e:<\/p>\n
var express = require('express');\r\nvar app = express();\r\nvar helmet = require('helmet');\r\n \r\nvar port = process.env.PORT || 8080; \r\n \r\nvar apiRoutes = express.Router();\r\napp.use(helmet());\r\n \r\napiRoutes.get('\/', function(req, res) {\r\n    res.json({ message: 'API radi!' });  \r\n});\r\n\r\n\/\/ sve rute sadr\u017eavati \u0107e '\/api'\r\napp.use('\/api', apiRoutes);\r\n \r\napp.listen(port);\r\nconsole.log('API je pokrenut i koristi port:' + ' ' + port);<\/pre>\n
Ako sada pokrenem API<\/em> na adresi http:\/\/localhost:8080\/api unutar Google Chrome Developer alata<\/a><\/em> pod tabom Network<\/a><\/em> dobit \u0107u sljede\u0107e:<\/p>\n
\"HelmetJS<\/a><\/p>\n
Na slici iznad mogu se vidjeti headeri kojih ranije nije bilo, a to su:<\/p>\n
Strict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block<\/pre>\n
Tako\u0111er, headere mogu vidjeti i pokretanjem sljede\u0107e naredbe:<\/p>\n
curl -i http:\/\/localhost:8080\/api<\/pre>\n
\"Command<\/a><\/p>\n
Zaklju\u010dak<\/h2>\n
Helmet.js<\/em> nije “all in one<\/em>” rje\u0161enje niti se njegovim postavljenjem unutar projekta mo\u017ee re\u0107i da je sigurnosna za\u0161tita aplikacije gotova, ali je svakako dobar po\u010detak procesa razmi\u0161ljanja o sigurnosti. <\/p>\n","protected":false},"excerpt":{"rendered":"
Sigurnost, jedna od stvari s kojoj svi prilikom razvoja aplikacije govore, ali ju malo njih smatra ozbiljnom ili odga\u0111a za kasnije. S druge strane, HTTP headeri su ne\u0161to \u0161to korisnici Express.js aplikacije ne vide i onda je developerima lako zapostaviti ih i gledati na njih kao na ne\u0161to nebitno. S obzirom da headeri daju razne … Nastavi \u010ditati HelmetJS – za\u0161tita HTTP headera Express.js aplikacija<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":8578,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[565,351],"tags":[375,549,378],"class_list":["post-8535","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backend","category-razvoj","tag-express-js","tag-helmetjs","tag-node-js"],"yoast_head":"\nHelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/\" \/>\n<meta property=\"og:locale\" content=\"hr_HR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107\" \/>\n<meta property=\"og:description\" content=\"Sigurnost, jedna od stvari s kojoj svi prilikom razvoja aplikacije govore, ali ju malo njih smatra ozbiljnom ili odga\u0111a za kasnije. S druge strane, HTTP headeri su ne\u0161to \u0161to korisnici Express.js aplikacije ne vide i onda je developerima lako zapostaviti ih i gledati na njih kao na ne\u0161to nebitno. S obzirom da headeri daju razne … Nastavi \u010ditati HelmetJS – za\u0161tita HTTP headera Express.js aplikacija\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/\" \/>\n<meta property=\"og:site_name\" content=\"Tomislav Stankovi\u0107\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-28T19:57:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-05T17:45:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"825\" \/>\n\t<meta property=\"og:image:height\" content=\"510\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tomislav Stankovi\u0107\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Napisao\/la\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tomislav Stankovi\u0107\" \/>\n\t<meta name=\"twitter:label2\" content=\"Procijenjeno vrijeme \u010ditanja\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/\"},\"author\":{\"name\":\"Tomislav Stankovi\u0107\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0329c549c57700034ea77f5d3d78396d\"},\"headline\":\"HelmetJS – za\u0161tita HTTP headera Express.js aplikacija\",\"datePublished\":\"2018-10-28T19:57:21+00:00\",\"dateModified\":\"2019-01-05T17:45:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/\"},\"wordCount\":643,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0329c549c57700034ea77f5d3d78396d\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/10\\\/expressjs-helmetjs-sigurnost-min.jpg\",\"keywords\":[\"Express.js\",\"HelmetJS\",\"Node.js\"],\"articleSection\":[\"Backend\",\"Razvoj\"],\"inLanguage\":\"hr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/\",\"url\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/\",\"name\":\"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/10\\\/expressjs-helmetjs-sigurnost-min.jpg\",\"datePublished\":\"2018-10-28T19:57:21+00:00\",\"dateModified\":\"2019-01-05T17:45:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#breadcrumb\"},\"inLanguage\":\"hr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/10\\\/expressjs-helmetjs-sigurnost-min.jpg\",\"contentUrl\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/10\\\/expressjs-helmetjs-sigurnost-min.jpg\",\"width\":825,\"height\":510,\"caption\":\"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/helmetjs-expressjs\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Po\u010detna stranica\",\"item\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HelmetJS – za\u0161tita HTTP headera Express.js aplikacija\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/\",\"name\":\"Tomislav Stankovi\u0107\",\"description\":\"Sam svoj bloger\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0329c549c57700034ea77f5d3d78396d\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"hr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/#\\\/schema\\\/person\\\/0329c549c57700034ea77f5d3d78396d\",\"name\":\"Tomislav Stankovi\u0107\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"hr\",\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/cropped-TomislavStankovic.jpg\",\"url\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/cropped-TomislavStankovic.jpg\",\"contentUrl\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/cropped-TomislavStankovic.jpg\",\"width\":248,\"height\":165,\"caption\":\"Tomislav Stankovi\u0107\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/cropped-TomislavStankovic.jpg\"},\"description\":\"Bloger \u0161irokog raspona interesa od kojih dio voli objaviti na ovom blogu. U neslobodno vrijeme Angular developer mobilnih i web aplikacija.\",\"sameAs\":[\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/tomislavstankovic\\\/\"],\"url\":\"https:\\\/\\\/www.tomislavstankovic.com\\\/blog\\\/author\\\/tomislavstankovic\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/","og_locale":"hr_HR","og_type":"article","og_title":"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107","og_description":"Sigurnost, jedna od stvari s kojoj svi prilikom razvoja aplikacije govore, ali ju malo njih smatra ozbiljnom ili odga\u0111a za kasnije. S druge strane, HTTP headeri su ne\u0161to \u0161to korisnici Express.js aplikacije ne vide i onda je developerima lako zapostaviti ih i gledati na njih kao na ne\u0161to nebitno. S obzirom da headeri daju razne … Nastavi \u010ditati HelmetJS – za\u0161tita HTTP headera Express.js aplikacija","og_url":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/","og_site_name":"Tomislav Stankovi\u0107","article_published_time":"2018-10-28T19:57:21+00:00","article_modified_time":"2019-01-05T17:45:49+00:00","og_image":[{"width":825,"height":510,"url":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg","type":"image\/jpeg"}],"author":"Tomislav Stankovi\u0107","twitter_card":"summary_large_image","twitter_misc":{"Napisao\/la":"Tomislav Stankovi\u0107","Procijenjeno vrijeme \u010ditanja":"4 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#article","isPartOf":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/"},"author":{"name":"Tomislav Stankovi\u0107","@id":"https:\/\/www.tomislavstankovic.com\/blog\/#\/schema\/person\/0329c549c57700034ea77f5d3d78396d"},"headline":"HelmetJS – za\u0161tita HTTP headera Express.js aplikacija","datePublished":"2018-10-28T19:57:21+00:00","dateModified":"2019-01-05T17:45:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/"},"wordCount":643,"commentCount":0,"publisher":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/#\/schema\/person\/0329c549c57700034ea77f5d3d78396d"},"image":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg","keywords":["Express.js","HelmetJS","Node.js"],"articleSection":["Backend","Razvoj"],"inLanguage":"hr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/","url":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/","name":"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija - Tomislav Stankovi\u0107","isPartOf":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#primaryimage"},"image":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg","datePublished":"2018-10-28T19:57:21+00:00","dateModified":"2019-01-05T17:45:49+00:00","breadcrumb":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#breadcrumb"},"inLanguage":"hr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/"]}]},{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#primaryimage","url":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg","contentUrl":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2018\/10\/expressjs-helmetjs-sigurnost-min.jpg","width":825,"height":510,"caption":"HelmetJS - za\u0161tita HTTP headera Express.js aplikacija"},{"@type":"BreadcrumbList","@id":"https:\/\/www.tomislavstankovic.com\/blog\/helmetjs-expressjs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Po\u010detna stranica","item":"https:\/\/www.tomislavstankovic.com\/blog\/"},{"@type":"ListItem","position":2,"name":"HelmetJS – za\u0161tita HTTP headera Express.js aplikacija"}]},{"@type":"WebSite","@id":"https:\/\/www.tomislavstankovic.com\/blog\/#website","url":"https:\/\/www.tomislavstankovic.com\/blog\/","name":"Tomislav Stankovi\u0107","description":"Sam svoj bloger","publisher":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/#\/schema\/person\/0329c549c57700034ea77f5d3d78396d"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tomislavstankovic.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"hr"},{"@type":["Person","Organization"],"@id":"https:\/\/www.tomislavstankovic.com\/blog\/#\/schema\/person\/0329c549c57700034ea77f5d3d78396d","name":"Tomislav Stankovi\u0107","image":{"@type":"ImageObject","inLanguage":"hr","@id":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2019\/10\/cropped-TomislavStankovic.jpg","url":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2019\/10\/cropped-TomislavStankovic.jpg","contentUrl":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2019\/10\/cropped-TomislavStankovic.jpg","width":248,"height":165,"caption":"Tomislav Stankovi\u0107"},"logo":{"@id":"https:\/\/www.tomislavstankovic.com\/blog\/wp-content\/uploads\/2019\/10\/cropped-TomislavStankovic.jpg"},"description":"Bloger \u0161irokog raspona interesa od kojih dio voli objaviti na ovom blogu. U neslobodno vrijeme Angular developer mobilnih i web aplikacija.","sameAs":["https:\/\/www.tomislavstankovic.com\/blog\/","https:\/\/www.linkedin.com\/in\/tomislavstankovic\/"],"url":"https:\/\/www.tomislavstankovic.com\/blog\/author\/tomislavstankovic\/"}]}},"_links":{"self":[{"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/posts\/8535","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/comments?post=8535"}],"version-history":[{"count":36,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/posts\/8535\/revisions"}],"predecessor-version":[{"id":8577,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/posts\/8535\/revisions\/8577"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/media\/8578"}],"wp:attachment":[{"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/media?parent=8535"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/categories?post=8535"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tomislavstankovic.com\/blog\/wp-json\/wp\/v2\/tags?post=8535"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}