helmet.ieNoOpen() does not work-Information Security

JavaScript
1

some one else also had the same problem, i mean seems very easy i have tried all different variations and i still get error

its the line 6 of the following exercise :

Information Security with HelmetJS - Prevent IE from Opening Untrusted HTML with helmet.ieNoOpen()

Tell us what’s happening:
// running tests
helmet.ieNoOpen() middleware should be mounted correctly
// tests completed

Your code so far
const ieNoOpen = require(‘ienoopen’)
app.use(helmet.ieNoOpen())

Your browser information:

User Agent is: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36.

Challenge: Prevent IE from Opening Untrusted HTML with helmet.ieNoOpen()

Link to the challenge:

1 Like
2

Same here, even though I find the x-download-options enabled with the correct response header

x-download-options : noopen enabled while the testcase failed

Have tried both code style referencing the official doc, while both cases fail the test with the following error :

// running tests
helmet.ieNoOpen() middleware should be mounted correctly
// tests completed

Here is my link to my codebase

3

Using “helmet”: “3.21.0” in the package.json worked for me.
@GohEeEn @redRat

1 Like
4

Welcome, redRat.

This is a known issue, and a temporary fix is as @places_m mentioned - using an older version of helmet.

You can read about the issue here: https://github.com/freeCodeCamp/freeCodeCamp/issues/39190

1 Like