diff --git a/backend/server.js b/backend/server.js index 2e56db7..b67b21f 100644 --- a/backend/server.js +++ b/backend/server.js @@ -9,6 +9,7 @@ const url = require('./middleware/url'); const corsOptions = require('./config/cors'); const cors = require('cors'); const compression = require('compression'); +const helmet = require('helmet'); const api = require('./routes/api'); const room = require('./routes/room'); const sms = require('./routes/sms'); @@ -55,6 +56,8 @@ mongoose .then(() => { const app = express(); + app.use(helmet.xssFilter()); // Enable XSS protection + app.use(helmet.noSniff()); // Enable content type sniffing prevention app.use(cors(corsOptions())); app.use(compression()); app.use(express.static(frontendDir)); diff --git a/frontend/js/client.js b/frontend/js/client.js index 414e0ef..bbc6877 100644 --- a/frontend/js/client.js +++ b/frontend/js/client.js @@ -9,7 +9,7 @@ * @license For private project or commercial purposes contact us at: license.mirotalk@gmail.com or purchase it directly via Code Canyon: * @license https://codecanyon.net/item/a-selfhosted-mirotalks-webrtc-rooms-scheduler-server/42643313 * @author Miroslav Pejic - miroslav.pejic.85@gmail.com - * @version 1.1.35 + * @version 1.1.36 */ const userAgent = navigator.userAgent; diff --git a/package.json b/package.json index 1a87edd..e884a9d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "mirotalkwebrtc", - "version": "1.1.35", + "version": "1.1.36", "description": "MiroTalk WebRTC admin", "main": "server.js", "scripts": { @@ -33,7 +33,7 @@ "license": "AGPL-3.0", "homepage": "https://github.com/miroslavpejic85/mirotalkwebrtc", "dependencies": { - "@sentry/node": "^8.51.0", + "@sentry/node": "^8.53.0", "axios": "^1.7.9", "bcryptjs": "^2.4.3", "colors": "1.4.0", @@ -42,13 +42,14 @@ "crypto-js": "^4.2.0", "dotenv": "^16.4.7", "express": "^4.21.2", + "helmet": "^8.0.0", "jsonwebtoken": "^9.0.2", "js-yaml": "^4.1.0", "mongoose": "^8.9.5", "ngrok": "^5.0.0-beta.2", "nodemailer": "^6.10.0", "swagger-ui-express": "^5.0.1", - "twilio": "^5.4.2" + "twilio": "^5.4.3" }, "devDependencies": { "nodemon": "^3.1.9",