[mirotalkwebrtc] - add helmet, update dep

backend/server.js

@@ -9,6 +9,7 @@ const url = require('./middleware/url');
 const corsOptions = require('./config/cors');
 const cors = require('cors');
 const compression = require('compression');
+const helmet = require('helmet');
 const api = require('./routes/api');
 const room = require('./routes/room');
 const sms = require('./routes/sms');
@@ -55,6 +56,8 @@ mongoose
     .then(() => {
         const app = express();
 
+        app.use(helmet.xssFilter());    // Enable XSS protection
+        app.use(helmet.noSniff());      // Enable content type sniffing prevention
         app.use(cors(corsOptions()));
         app.use(compression());
         app.use(express.static(frontendDir));

frontend/js/client.js

@@ -9,7 +9,7 @@
  * @license For private project or commercial purposes contact us at: [email protected] or purchase it directly via Code Canyon:
  * @license https://codecanyon.net/item/a-selfhosted-mirotalks-webrtc-rooms-scheduler-server/42643313
  * @author  Miroslav Pejic - [email protected]
- * @version 1.1.35
+ * @version 1.1.36
  */
 
 const userAgent = navigator.userAgent;

package.json

@@ -1,6 +1,6 @@
 {
     "name": "mirotalkwebrtc",
-    "version": "1.1.35",
+    "version": "1.1.36",
     "description": "MiroTalk WebRTC admin",
     "main": "server.js",
     "scripts": {
@@ -33,7 +33,7 @@
     "license": "AGPL-3.0",
     "homepage": "https://github.com/miroslavpejic85/mirotalkwebrtc",
     "dependencies": {
-        "@sentry/node": "^8.51.0",
+        "@sentry/node": "^8.53.0",
         "axios": "^1.7.9",
         "bcryptjs": "^2.4.3",
         "colors": "1.4.0",
@@ -42,13 +42,14 @@
         "crypto-js": "^4.2.0",
         "dotenv": "^16.4.7",
         "express": "^4.21.2",
+        "helmet": "^8.0.0",
         "jsonwebtoken": "^9.0.2",
         "js-yaml": "^4.1.0",
         "mongoose": "^8.9.5",
         "ngrok": "^5.0.0-beta.2",
         "nodemailer": "^6.10.0",
         "swagger-ui-express": "^5.0.1",
-        "twilio": "^5.4.2"
+        "twilio": "^5.4.3"
     },
     "devDependencies": {
         "nodemon": "^3.1.9",