DevSecOps HTTP Application

This repository contains a Node.js/Express backend with a React frontend. It demonstrates the use of CORS middleware to remediate Cross Origin Resource Sharing (CORS) vulnerabilities and Helmet for creating secure HTTP headers.

Contents

• Backend: Express.js API with CORS and Helmet middleware
• Frontend: React application that consumes the API

Installation and Setup

Backend Setup

1. Install dependencies:

   npm install
   

2. Start the server:

   npm start
   

   For development with auto-reload:

   npm run dev
   

3. The server will run on port 5000 by default.

Frontend Setup

1. Navigate to the frontend directory:

   cd frontend
   

2. Install dependencies:

   npm install
   

3. Start the development server:

   npm start
   

4. The React app will run on port 3000 by default.

Security Features

• CORS: The Express app uses the cors middleware to control which origins can access the API.
• Helmet: The helmet middleware can be enabled to add various HTTP headers that improve security.

License

Copyright (c) IBM Corporation. All rights reserved.

Licensed under the Apache License. See LICENSE.

---

© IBM Corporation 2025. All rights reserved.