diff --git a/server/package.json b/server/package.json
index 2b76addf..0bc1d46f 100644
--- a/server/package.json
+++ b/server/package.json
@@ -1,78 +1,83 @@
-{
- 
-
-  "name": "blogapp",
- 
-
-  "version": "1.0.0",
- 
-
-  "description": "",
- 
-
-  "main": "server.js",
- 
-
-  "scripts": {
- 
-
-   
-
-  "start": "nodemon server.js",
- 
-
-   
-
-  "test": "echo \"Error: no test specified\" && exit 1"
- 
-
-  },
- 
-
-  "author": "khushi patel",
- 
-
-  "license": "ISC",
- 
-
-  "devDependencies": {
- 
-
-   
-
-  "nodemon": "^2.0.16"
- 
-
-  },
- 
-
-  "dependencies": {
- 
-
-   
-
-  "bcryptjs": "^2.4.3",
- 
-
-   
-
-  "cors": "^2.8.5",
-
-
-
-  
-  "dotenv": "^16.5.0",
- 
-
-   
-
-  "express": "^4.18.1",
- 
-
-   
-
-  "mongoose": "^6.3.4"
- 
-
-  }
-}
+{
+ 

+

+  "name": "blogapp",
+ 

+

+  "version": "1.0.0",
+ 

+

+  "description": "",
+ 

+

+  "main": "server.js",
+ 

+

+  "scripts": {
+ 

+

+   

+

+  "start": "nodemon server.js",
+ 

+

+   

+

+  "test": "echo \"Error: no test specified\" && exit 1"
+ 

+

+  },
+ 

+

+  "author": "khushi patel",
+ 

+

+  "license": "ISC",
+ 

+

+  "devDependencies": {
+ 

+

+   

+

+  "nodemon": "^2.0.16"
+ 

+

+  },
+ 

+

+  "dependencies": {
+ 

+

+   

+

+  "bcryptjs": "^2.4.3",
+ 

+

+   

+

+  "cors": "^2.8.5",
+ 

+

+   

+

+  "dotenv": "^16.5.0",
+ 

+

+   

+

+  "express": "^4.18.1",
+ 

+

+   

+

+  "helmet": "^8.1.0",
+ 

+

+   

+

+  "mongoose": "^6.3.4"
+ 

+

+  }
+}
diff --git a/server/server.js b/server/server.js
index a1e17658..d9e8b048 100644
--- a/server/server.js
+++ b/server/server.js
@@ -1,6 +1,7 @@
 const express = require("express");
 const userRouter = require("./routes/user-routes");
 const blogRouter = require("./routes/blog-routes");
+const helmet = require("helmet");
 require("./config/db");
 const cors = require("cors");
 
@@ -8,6 +9,14 @@ const app = express();
 
 app.use(cors());
 
+//setting helmet middleware
+app.use(helmet(
+  {
+    contentSecurityPolicy: false,
+    crossOriginEmbedderPolicy: false,
+  }
+));
+
 app.set("view engine", "ejs");
 app.use(express.json());