xfo-whitelist

Apply X-Frame-Options based on a whitelist

Usage no npm install needed!

<script type="module">
  import xfoWhitelist from 'https://cdn.skypack.dev/xfo-whitelist';
</script>

README

xfo-whitelist

Connect/Express middleware to apply X-Frame-Options based on a whitelist

Quick start

Install using npm: npm install --save xfo-whitelist

Include the module inside your application:

var express = require("express"),
    xfo = require("xfo-whitelist"),

var app = express();

// Add X-Frame-Options: DENY to all requests but "/embed.html"
app.use(xfo(["/embed.html"]));
app.use(express.static(__dirname + "/public"));