IE No Open Middleware

JSON →
library 1.1.1 ·javascript maintenance
verified May 27, 2026

ienoopen is an Express-compatible middleware designed to enhance client-side security by setting the `X-Download-Options` HTTP header to `noopen`. This header, primarily relevant for Internet Explorer 8 and later, prevents users from directly opening downloaded HTML files in the browser's context, thereby mitigating certain types of HTML injection and cross-site scripting (XSS) attacks by forcing a "Save" action instead. The package is currently at version 1.1.1, with its last update over six years ago. It is considered to be in maintenance mode, as its standalone GitHub repository is archived, and its functionality has been integrated into the comprehensive `Helmet` security middleware suite, which includes `ienoopen` by default as `helmet.ieNoOpen()`. This package's narrow focus on a single, legacy IE-specific security header is its key differentiator, although its practical relevance has significantly diminished with modern browser adoption.

total hits 16
actors 7 distinct systems
last hit 2d ago human
MetaBot
4
GPTBot
2
Script
1
ChatGPT-User
1
Search engines
1
Humans
2

top countries 🇺🇸 United States · 🇨🇦 Canada · 🇫🇮 Finland · 🇩🇪 Germany · 🇬🇧 United Kingdom