Issue: Missing HTTP Security Headers (Helmet)

[NahomAlemu]

Description

The backend does not use the helmet middleware, leaving it vulnerable to common web attacks.

File: nsc-events-nestjs/src/main.ts

Missing Security Headers:

Header	Purpose
X-Content-Type-Options	Prevents MIME-type sniffing
X-Frame-Options	Prevents clickjacking
Strict-Transport-Security	Enforces HTTPS
X-XSS-Protection	XSS attack mitigation
Content-Security-Policy	Prevents code injection

Tasks

Tasks:

• npm install helmet, import helmet from 'helmet'; app.use(helmet());

Visual Aids

No response

[NahomAlemu]

I've completed my practicum and will no longer be working on this. I'm unassigning myself so someone else can pick it up if needed. My progress can be found in the closed PR #186