Struct SecurityConfig 

pub struct SecurityConfig {
    pub hsts_max_age: u64,
    pub hsts_include_subdomains: bool,
    pub hsts_preload: bool,
    pub frame_options: FrameOptions,
    pub referrer_policy: &'static str,
    pub permissions_policy: Option<&'static str>,
    pub csp_default: &'static str,
    pub csp_docs_override: Option<&'static str>,
    pub nosniff: bool,
    pub xss_protection: bool,
}

Full security header configuration.

Every field has a production-safe default. Override only what your deployment requires. See module docs for the default value table.

Fields

hsts_max_age: u64

HSTS max-age in seconds. Set 0 to disable the header (e.g. in local dev where TLS is not in use). Default: 31_536_000 (1 year).

hsts_include_subdomains: bool

Include includeSubDomains directive. Default: true.

hsts_preload: bool

Include preload directive (required for HSTS preload submission). Default: true.

frame_options: FrameOptions

X-Frame-Options policy. Default: FrameOptions::Deny.

referrer_policy: &'static str

Referrer-Policy value. Must be a 'static str. Default: "strict-origin-when-cross-origin".

permissions_policy: Option<&'static str>

Permissions-Policy value. None omits the header. Default: restrictive policy disabling camera, microphone, geolocation, payment, and USB.

csp_default: &'static str

CSP for all routes except /docs. Default: "default-src 'self'".

csp_docs_override: Option<&'static str>

CSP override for the /docs Swagger UI route. None uses csp_default. Default: relaxes script-src and style-src for the unpkg CDN.

nosniff: bool

Enable X-Content-Type-Options: nosniff. Default: true.

xss_protection: bool

Enable X-XSS-Protection: 1; mode=block. Default: true.

Trait Implementations

impl Clone for SecurityConfig

fn clone(&self) -> SecurityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityConfig

fn default() -> Self

Returns the “default value” for a type.