Security - Implement Lusca by default

[khwerhahn]

It would be really nice if kraken.js was included by default. PayPal maintains a project called kraken.js.

http://krakenjs.com/
Nice talk about node security and kranken.js :http://goo.gl/qoJP9H

[eikaramba]

Yes that was something i also wondered myself, looks really good! +1 :)

[kingcody]

@khwerhahn thanks for posting 👍

I'm not sure of the level of integration that would be required to use the Kraken suite. From what I could tell, Kraken prefers to bootstrap the entire express app based on the middleware and routes that you provide it. Perhaps someone with experience using Kraken could lend their expertise on this?

That being said, there has been talk of adding a set of security middlewares to the project such as Helmet.js or perhaps even Lusca. I'd be glad to work on that with anyone interested.

[andrewstuart]

Seems like Kraken.js just includes Lusca anyway, since that comprises their entire security section.

[Awk34]

This is neat, I'll have to look into it more