{"_id":"helmet-crossdomain","_rev":"9-eea58ce972ea1220badc215525616f52","name":"helmet-crossdomain","description":"Set the X-Permitted-Cross-Domain-Policies header in Express apps","dist-tags":{"latest":"0.5.0"},"versions":{"0.1.0":{"name":"helmet-crossdomain","author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"http://evanhahn.com"},"description":"Serve a restrictive crossdomain.xml at your site's root.","version":"0.1.0","keywords":["helmet","security","express","connect","crossdomain.xml"],"repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues"},"scripts":{"test":"mocha"},"devDependencies":{"connect":"^2.25.7","mocha":"^1.21.4","supertest":"^0.13.0"},"gitHead":"49bd5e56a3881abfaa678f6dc9ba9d687e995816","homepage":"https://github.com/helmetjs/crossdomain","_id":"helmet-crossdomain@0.1.0","_shasum":"2774aa1e4475b00f78daa28d8215f9cdddcc8509","_from":".","_npmVersion":"1.4.21","_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"dist":{"shasum":"2774aa1e4475b00f78daa28d8215f9cdddcc8509","tarball":"https://registry.npmjs.org/helmet-crossdomain/-/helmet-crossdomain-0.1.0.tgz","integrity":"sha512-/YpYjcDqXQY7/Xv4Le/OMepqvMZsUVj2WnuRisCQowg2yoBbk9VeMYzssy/mHa4BidewGyT01BomQzTVPvD24w==","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCgTlsdDVk1TAADVIoK/GfTPRUHaGbafFmzuksLWLuoswIgFiAIamWyFp88pu3+yd/qStkZ+VFS7DEy4khjeGrroOY="}]},"directories":{}},"0.2.0":{"name":"helmet-crossdomain","author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"},"description":"Serve a restrictive crossdomain.xml at your site's root.","version":"0.2.0","license":"MIT","keywords":["security","express","connect","crossdomain.xml"],"repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues"},"engines":{"node":">= 4"},"scripts":{"pretest":"standard --fix","test":"mocha"},"devDependencies":{"connect":"^3.6.6","mocha":"^5.0.1","standard":"^10.0.3","supertest":"^3.0.0"},"standard":{"globals":["describe","it"]},"gitHead":"de6966036f8b144032be0d58890e1939d9056272","homepage":"https://github.com/helmetjs/crossdomain#readme","_id":"helmet-crossdomain@0.2.0","_npmVersion":"5.6.0","_nodeVersion":"9.5.0","_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"dist":{"integrity":"sha512-TuaEklW34yBnW9qm11FoYGnHjf84qS098j9Qb2Kab6yAw7obnnYTOoll/SIZsDm/u0DxEmC2N7J8X9LnwbpKig==","shasum":"13a1b6333a1ea209734d31bf12713a9ac8db8a82","tarball":"https://registry.npmjs.org/helmet-crossdomain/-/helmet-crossdomain-0.2.0.tgz","fileCount":6,"unpackedSize":5180,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIEQoq9hFQubj5tBgDjw/AnyWsoi97zRzF7YZPtNZV6Q+AiAyywszrPuQzENrn4YVOsWJGTQzXGZlRhxUezLxIP+OQw=="}]},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/helmet-crossdomain_0.2.0_1518796295407_0.2819688249765582"},"_hasShrinkwrap":false},"0.3.0":{"name":"helmet-crossdomain","author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"},"description":"Set the X-Permitted-Cross-Domain-Policies header in Express apps","version":"0.3.0","license":"MIT","keywords":["security","express","connect","crossdomain.xml","x-permitted-cross-domain-policies","flash"],"repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues"},"engines":{"node":">= 6"},"scripts":{"pretest":"standard --fix","test":"mocha"},"devDependencies":{"connect":"^3.6.6","mocha":"^5.2.0","standard":"^11.0.1","supertest":"^3.1.0"},"standard":{"globals":["describe","it"]},"gitHead":"6f1891d7a02b3c745b47817e3550df4947b78cab","homepage":"https://github.com/helmetjs/crossdomain#readme","_id":"helmet-crossdomain@0.3.0","_npmVersion":"6.2.0","_nodeVersion":"10.5.0","_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"dist":{"integrity":"sha512-YiXhj0E35nC4Na5EPE4mTfoXMf9JTGpN4OtB4aLqShKuH9d2HNaJX5MQoglO6STVka0uMsHyG5lCut5Kzsy7Lg==","shasum":"707e2df930f13ad61f76ed08e1bb51ab2b2e85fa","tarball":"https://registry.npmjs.org/helmet-crossdomain/-/helmet-crossdomain-0.3.0.tgz","fileCount":6,"unpackedSize":6335,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n\r\nwsFcBAEBCAAQBQJbVNSRCRA9TVsSAnZWagAAEVQP/jzk1uye0ikRyhTxFLaY\n1mv8ce3abISEHNNxi+cdXvYnd/KTr25oXnws9eHIhCmPTMabwNpqLQrjzLo9\nXdyQhhBr5A/FXZ4hr2PzF8g65zbxiPWBjDQghPYeGHA64atHw/AXKcX5a3l4\nDliodao8XGGeO+RayESkDT0tRuEeh0T8igtXNRhgpih+ezGMO9SxcNVNW1cJ\n3UymWtMKqVUwASvdVHMQCLTAZn4jxCEdbscy+V5hPqCXRpUnvAAB4vSm3Kig\nLAnA55z3zx7HEn0WtM2CEUalROovheAvS1fY+4r+AKAi6tc5t5fZoXyOJKBW\nu82PTrUJSxO3xf2WYjovFlkt6MdOt8YzWVUTDLkQ8LW/yQwOSXa2A27orRJj\nQZDRVhpTl5b3RyhwmtoIqQ8r2q1afl5DhHTk5Bem3QhWp3ssi534e0zADHqI\njfK4nL97JQi3xx4byAV3RJhc6Qo04iVy95NBLvufwuLzAMdSYPLlFwIZpprw\nCZTrcYMzUqnrpizkyC0uQDcIR5D/AcsE0n6lAahBrORsb9jG95Ke7ti0ouFH\nfA/9VcxielKrFFjTNjNHDX0OPu4iQ3IluVKgiYwLtSn33sXhxnFwYu+0bW/Y\nBwsLPt+I046b7GgjmV7ewHuph8Xgnc09wVCrr5O2oLYJzzPhWDG/h2E4sE7Y\nFYI4\r\n=Pwa4\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIQCB/BQ0cjbpxJKQ5iHafiasqiW6O28J305ldrVKiyZZcAIgM3hgWO0rzRyYxUNC285BZtCgvkmlAoBnYNeUQl8+4yI="}]},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/helmet-crossdomain_0.3.0_1532286097523_0.8741214484328683"},"_hasShrinkwrap":false},"0.4.0":{"name":"helmet-crossdomain","author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"},"description":"Set the X-Permitted-Cross-Domain-Policies header in Express apps","version":"0.4.0","license":"MIT","keywords":["security","express","connect","crossdomain.xml","x-permitted-cross-domain-policies","flash"],"homepage":"https://helmetjs.github.io/docs/crossdomain/","repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues","email":"me@evanhahn.com"},"engines":{"node":">=4.0.0"},"main":"./dist/index.js","typings":"./dist/index.d.ts","scripts":{"pretest":"npm run lint","prepublishOnly":"npm run build","lint":"eslint --fix '**/*.ts'","test":"jest --config test/jest-config.json","clean":"rm -rf dist","build":"npm run clean && tsc"},"devDependencies":{"@types/connect":"^3.4.32","@types/jest":"^24.0.14","@types/supertest":"^2.0.7","@typescript-eslint/eslint-plugin":"^1.9.0","@typescript-eslint/parser":"^1.9.0","connect":"^3.7.0","eslint":"^5.16.0","eslint-config-helmet":"^0.2.0","jest":"^24.8.0","supertest":"^4.0.2","ts-jest":"^24.0.2","typescript":"^3.5.2"},"gitHead":"4f120ef79175741242ca6e21cfa974242c224413","_id":"helmet-crossdomain@0.4.0","_nodeVersion":"12.3.1","_npmVersion":"6.9.0","dist":{"integrity":"sha512-AB4DTykRw3HCOxovD1nPR16hllrVImeFp5VBV9/twj66lJ2nU75DP8FPL0/Jp4jj79JhTfG+pFI2MD02kWJ+fA==","shasum":"5f1fe5a836d0325f1da0a78eaa5fd8429078894e","tarball":"https://registry.npmjs.org/helmet-crossdomain/-/helmet-crossdomain-0.4.0.tgz","fileCount":6,"unpackedSize":5430,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n9EwO\r\n=W2oI\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIFe5MR6uPwnS/7DN/mTrNEhxtixLHytrimaE963adz+VAiEAh1UHRXJAK/BRRMt2NTLsNMzqu3tKAdlO066Srfnl4GE="}]},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/helmet-crossdomain_0.4.0_1560608223590_0.6333267377197842"},"_hasShrinkwrap":false},"0.5.0":{"name":"helmet-crossdomain","author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"},"description":"Set the X-Permitted-Cross-Domain-Policies header in Express apps","version":"0.5.0","license":"MIT","keywords":["security","express","connect","crossdomain.xml","x-permitted-cross-domain-policies","flash"],"homepage":"https://helmetjs.github.io/docs/crossdomain/","repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues","email":"me@evanhahn.com"},"engines":{"node":">=8.0.0"},"main":"./dist/index.js","typings":"./dist/index.d.ts","scripts":{"pretest":"npm run lint","prepublishOnly":"npm run build","lint":"eslint --fix '**/*.ts'","test":"jest --config test/jest-config.json","clean":"rm -rf dist","build":"npm run clean && tsc"},"devDependencies":{"@types/connect":"^3.4.32","@types/jest":"^24.0.18","@types/supertest":"^2.0.8","@typescript-eslint/eslint-plugin":"^2.0.0","@typescript-eslint/parser":"^2.0.0","connect":"^3.7.0","eslint":"^6.3.0","eslint-config-helmet":"^0.2.0","jest":"^24.9.0","supertest":"^4.0.2","ts-jest":"^24.0.2","typescript":"^3.6.2"},"gitHead":"3c17a2ec30f1916aadda32cde941f376385cd751","_id":"helmet-crossdomain@0.5.0","_nodeVersion":"12.6.0","_npmVersion":"6.9.0","dist":{"integrity":"sha512-cKNYQ+iKXrbPjIXZG9NnTLQGFBH0DUlNWXtSsxQqzvJ0g/PyevYA7gamEItKp8VLVNDXbsXksFFahOieAIVEWA==","shasum":"b7ff4122f93cbebd500cc5c901e7690215d0f1ef","tarball":"https://registry.npmjs.org/helmet-crossdomain/-/helmet-crossdomain-0.5.0.tgz","fileCount":6,"unpackedSize":5493,"npm-signature":"-----BEGIN PGP SIGNATURE-----\r\nVersion: OpenPGP.js v3.0.4\r\nComment: https://openpgpjs.org\r\n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\n6m14\r\n=ipst\r\n-----END PGP SIGNATURE-----\r\n","signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEQCIHIuW3ZmvrIWHseIyNU0EEibGXpJx1FWqSClBWxLuwZtAiBtLd6qp/hbioN+4XPf8LoJFAhjlEO5LmJzeVULA0zs1A=="}]},"maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"_npmUser":{"name":"evanhahn","email":"me@evanhahn.com"},"directories":{},"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/helmet-crossdomain_0.5.0_1567367801651_0.7479544272849263"},"_hasShrinkwrap":false}},"readme":"X-Permitted-Cross-Domain-Policies middleware\n============================================\n[![Build Status](https://travis-ci.org/helmetjs/crossdomain.svg?branch=master)](https://travis-ci.org/helmetjs/crossdomain)\n\nThe `X-Permitted-Cross-Domain-Policies` header tells some web clients (like Adobe Flash or Adobe Acrobat) your domain's policy for loading cross-domain content. See the description on [OWASP](https://www.owasp.org/index.php/OWASP_Secure_Headers_Project#X-Permitted-Cross-Domain-Policies) for more.\n\nUsage:\n\n```javascript\nconst crossdomain = require('helmet-crossdomain')\n\n// Sets X-Permitted-Cross-Domain-Policies: none\napp.use(crossdomain())\n\n// You can use any of the following values:\napp.use(crossdomain({ permittedPolicies: 'none' }))\napp.use(crossdomain({ permittedPolicies: 'master-only' }))\napp.use(crossdomain({ permittedPolicies: 'by-content-type' }))\napp.use(crossdomain({ permittedPolicies: 'all' }))\n```\n\nThe `by-ftp-type` is not currently supported. Please open an issue or pull request if you desire this feature!\n\nIf you don't expect Adobe products to load data from your site, you get a minor security benefit by adding this header.\n","maintainers":[{"name":"evanhahn","email":"me@evanhahn.com"}],"time":{"modified":"2022-06-18T20:06:38.651Z","created":"2014-08-24T15:37:38.833Z","0.1.0":"2014-08-24T15:37:38.833Z","0.2.0":"2018-02-16T15:51:35.453Z","0.3.0":"2018-07-22T19:01:37.607Z","0.4.0":"2019-06-15T14:17:03.741Z","0.5.0":"2019-09-01T19:56:41.772Z"},"homepage":"https://helmetjs.github.io/docs/crossdomain/","keywords":["security","express","connect","crossdomain.xml","x-permitted-cross-domain-policies","flash"],"repository":{"type":"git","url":"git://github.com/helmetjs/crossdomain.git"},"author":{"name":"Evan Hahn","email":"me@evanhahn.com","url":"https://evanhahn.com"},"bugs":{"url":"https://github.com/helmetjs/crossdomain/issues","email":"me@evanhahn.com"},"readmeFilename":"README.md","license":"MIT"}