title: how to set HSTS header in create-react-app
body: <p>I have an app I've been building and I started it with <code>create-react-app</code>. I am trying to make it more secure by adding HSTS headers or similar, but can't seem to find anything online that explains a way to do this when you haven't built your own custom server. Most answers are using nginx or apache. My backend is built in <code>node.js express</code> and uses <code>helmet.js</code> which is working fine, however my frontend is completely separate and I am guessing my backend being secure doesn't really solve the problem. I saw the <code>react-helmet</code> package but I'm not sure if this is what I'm looking for. Can you use that package to set this kind of http header and how would you do that?</p>