Mário Gonçalves

> It's considered a side-effect of the design. > > Helmet is designed to be easy to use. It's not always possible to do this, but I try to make...

> Sorry, I don't understand this. Could you explain? Disregard my comment. 😄 I was needlessly concerned about conflicting middleware that adds `X-Powered-By` or others. Instead of: ```javascript app.use(helmet()); app.use(middlewareThatAddsXPoweredBy());...

Can confirm that we're also affect by the same issue and that this PR fixes it.

This is a good feature as it deprecates the need of a ".bowerrc" file in your project directory. Still waiting on news for this PR.

> I can't really merge this because evalOptions calls `eval`, making it an XSS risk. Any reason to keep using `eval`? It seems that most options are simple JSON-stringifiable options.

It's right there, mate! 😄 I'll add the latest release ( 0.0.4 ) there as well.

> Same issue, says Manifest file is missing or unreadable >  Have you followed the steps listed here https://github.com/mariomc/WayfarerPlusUltra#installation-guide-chrome ? For Google Chrome, you need to uncompress...