IE No Open Middleware
JSON →ienoopen is an Express-compatible middleware designed to enhance client-side security by setting the `X-Download-Options` HTTP header to `noopen`. This header, primarily relevant for Internet Explorer 8 and later, prevents users from directly opening downloaded HTML files in the browser's context, thereby mitigating certain types of HTML injection and cross-site scripting (XSS) attacks by forcing a "Save" action instead. The package is currently at version 1.1.1, with its last update over six years ago. It is considered to be in maintenance mode, as its standalone GitHub repository is archived, and its functionality has been integrated into the comprehensive `Helmet` security middleware suite, which includes `ienoopen` by default as `helmet.ieNoOpen()`. This package's narrow focus on a single, legacy IE-specific security header is its key differentiator, although its practical relevance has significantly diminished with modern browser adoption.
Traffic · last 30 days ↓71% vs prev 7d
top countries 🇺🇸 United States · 🇨🇦 Canada · 🇫🇮 Finland · 🇩🇪 Germany · 🇬🇧 United Kingdom