Add "headers" to middleware

[GiordanoArman]

What about adding the headers to the array of req values that get sanitized? Let's say an application uses an Authorization header, which or example could be "[email protected]:thisIsThePassWord", right now this module would not protect against an attack that exploits the headers feature.

The bit to change would be:

function middleware(options) {
  return function(req, res, next) {
    ['body', 'params', 'query', 'headers'].forEach(function(k) {
      if(req[k]) {
        req[k] = sanitize(req[k], options);
      }
    });
    next();
  };
}

Let me know what you think!

[fiznool]

This is a good idea. If you could put together a PR with corresponding tests I would gladly merge this in!

[fiznool]

Fixed in v2.0.0.