chore(deps): add helmet, express-rate-limit, express-validator

Add production dependencies introduced in recent security commits. Add docs/ENVIRONMENT_VARIABLES.md documenting TRUST_PROXY, SECRET, SESSION_SECRET, and ALLOWED_ORIGINS with configuration guidance.
2026-04-26 23:52:09 +02:00
parent 54b343b2fb
commit 80cd96e006
3 changed files with 157 additions and 3 deletions
@@ -34,7 +34,10 @@
        "errorhandler": "^1.5.1",
        "express": "^4.18.2",
        "express-jwt": "^8.4.1",
+        "express-rate-limit": "^8.4.1",
        "express-session": "^1.18.0",
+        "express-validator": "^7.3.2",
+        "helmet": "^8.1.0",
        "js-yaml": "^4.1.1",
        "jsonwebtoken": "^9.0.2",
        "method-override": "3.0.0",