Feature #141: Added Helmet middleware via config/helmet.js to improve…

[jikrana1]

📋 Pull Request — Add Helmet Middleware to Improve API Security

🔗 Related Issue

Closes #141 — [Feature]: Add Helmet Middleware to Improve API Security

✅ Changes Made

• Installed the helmet package as a dependency.
• Created a dedicated configuration file: config/helmet.js for centralized security setup.
• Imported and applied the helmetMiddleware in server.js early in the middleware chain.
• Disabled crossOriginEmbedderPolicy to prevent blocking external resources, ensuring zero breaking changes to the API.

🧪 Testing Checklist

• Helmet package installed successfully.
• Server starts without any errors.
• Existing API routes continue to function correctly.
• Security HTTP headers are now visible in the response.

📌 Benefits Achieved

• ✅ Improved API Security (Protects against XSS, clickjacking, MIME sniffing).
• ✅ Cleaner architecture (Security logic is separated into its own module).
• ✅ Zero downtime/breaking changes.