question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

TypeError: helmet.xframe is not a function

See original GitHub issue

Just bumped to v2 and in Changelog xframe is nowhere mentioned.

    helmet.xframe('allow-from', 'http://www.responsinator.com')
           ^

TypeError: helmet.xframe is not a function
    at Object.module.exports.secure (/home/michael-heuberger/binarykitchen/code/videomail.io/src/middleware/headers.js:35:12)

what’s missing?

Issue Analytics

  • State:closed
  • Created 7 years ago
  • Comments:10 (5 by maintainers)

github_iconTop GitHub Comments

6reactions
EvanHahncommented, Jun 11, 2016

@aralroca Try this:

app.use(helmet.noSniff())
3reactions
EvanHahncommented, Apr 30, 2016

This is mentioned in the 2.0.0 changelog but should probably have been better clarified.

Try using helmet.frameguard instead.

Read more comments on GitHub >

github_iconTop Results From Across the Web

How to use helmet? - node.js - Stack Overflow
First of all, Helmet is not enough to make your Express apps secure. ... Helmet will set a header called X-Frame-Options to SAMEORIGIN...
Read more >
TypeError: "x" is not a function - JavaScript - MDN Web Docs
The JavaScript exception "is not a function" occurs when there was an attempt to call a value from a function, but the value...
Read more >
Using Helmet to set the X-Frame-Options header - O'Reilly
Using Helmet to set the X-Frame-Options header Clickjacking is an ingenious technique for hiding an invisible containing malicious code, but positioned on ...
Read more >
How to use the helmet.xframe function in helmet - Snyk
To help you get started, we've selected a few helmet.xframe examples, ... Assume 'not found' in the error msgs is a 404. this...
Read more >
Node.js Security Tips | Cloudbees Blog
Helmet helps with the following middlewares: csp. crossdomain. xframe. xssfilter. and much more. For more info and on ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found