message: Disable X-Powered-By header leaking "Express"
diff: @@ -146,6 +146,7 @@ app.use(cors())
  app.use(helmet.noSniff())
  app.use(helmet.frameguard())
  // app.use(helmet.xssFilter()); // = no protection from persisted XSS via RESTful API
  +app.disable('x-powered-by')
  /* Remove duplicate slashes from URL which allowed bypassing subsequent filters */
  app.use((req, res, next) => {
  