Add Security-Related HTTP Headers

[entrotech]

Overview

An important step in protecting a site from simple malicious attacks id to make sure that HTTP traffic has the appropriate HTML Headers. Implement these headers to secure the site.

The MDN Observatory Tool can be used to assess the current site's vulnerability to many common attacks.
https://developer.mozilla.org/en-US/observatory

Running this tool on the production site for Food Oasis chows that our current implementation gets a grade of D:

Action Items

• Implement security headers. In node/expressjs applications, this is commonly addresses using the npm package Helmet, taking care to configure it appropriately for the application.

Resources/Instructions

REPLACE THIS TEXT -If there is a website which has documentation that helps with this issue provide the link(s) here.