Helmet helps secure Elysia apps by setting HTTP response headers. This is a port of the official helmet plugin for express.

bun add elysia-helmet

Here's a sample Elysia app that uses Helmet:

import { Elysia } from 'elysia';
import { helmet } from 'elysia-helmet';

new Elysia().use(helmet()).listen(3000);

For more configuration options, please refer to the original helmet documentation.

There seems to be a bug in the current version of Elysia that prevents the headers from being set correctly. As a workaround, you can use the aot flag must be set to false.

new Elysia({ aot: false }).use(helmet()).listen(3000);

Refer to this Issue.

This software ist distributed under the MIT license. For more information you can have a look at the license file.