Struct SecurityMiddleware 

pub struct SecurityMiddleware {
    pub csp: Option<CspConfig>,
    pub dns_prefetch_control: DnsPrefetchControl,
    pub expect_ct: Option<ExpectCtConfig>,
    pub frame_guard: FrameGuard,
    pub hsts: Option<HstsConfig>,
    pub hide_powered_by: bool,
    pub referrer_policy: ReferrerPolicy,
    pub xss_filter: XssFilter,
    pub content_type_options: ContentTypeOptions,
    pub download_options: DownloadOptions,
    pub permitted_cross_domain_policies: PermittedCrossDomainPolicies,
}

Main security middleware that combines all security features

Fields

csp: Option<CspConfig>

Content Security Policy configuration

dns_prefetch_control: DnsPrefetchControl

DNS Prefetch Control

expect_ct: Option<ExpectCtConfig>

Expect-CT configuration

frame_guard: FrameGuard

Frame Guard (X-Frame-Options)

hsts: Option<HstsConfig>

HSTS (Strict-Transport-Security)

hide_powered_by: bool

Hide X-Powered-By header

referrer_policy: ReferrerPolicy

Referrer Policy

xss_filter: XssFilter

X-XSS-Protection

content_type_options: ContentTypeOptions

X-Content-Type-Options

download_options: DownloadOptions

X-Download-Options

permitted_cross_domain_policies: PermittedCrossDomainPolicies

X-Permitted-Cross-Domain-Policies

Implementations

impl SecurityMiddleware

pub fn new() -> Self

Create a new security middleware with no protections enabled

pub fn with_csp(self, config: CspConfig) -> Self

Enable Content Security Policy

pub fn with_dns_prefetch_control(self, control: DnsPrefetchControl) -> Self

Enable DNS Prefetch Control

pub fn with_expect_ct(self, config: ExpectCtConfig) -> Self

Enable Expect-CT

pub fn with_frame_guard(self, guard: FrameGuard) -> Self

Set Frame Guard policy

pub fn with_hsts(self, config: HstsConfig) -> Self

Enable HSTS

pub fn hide_powered_by(self, hide: bool) -> Self

Hide X-Powered-By header

pub fn with_referrer_policy(self, policy: ReferrerPolicy) -> Self

Set Referrer Policy

pub fn with_xss_filter(self, filter: XssFilter) -> Self

Set XSS Filter

pub fn apply(&self, response: HttpResponse) -> HttpResponse

Apply security headers to a response

pub fn enable_all(max_age_seconds: u64) -> Self

Convenience method to enable all common security features (recommended defaults)

Trait Implementations

impl Clone for SecurityMiddleware

fn clone(&self) -> SecurityMiddleware

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityMiddleware

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityMiddleware

fn default() -> Self

Returns the “default value” for a type.

impl Middleware for SecurityMiddleware

Implement the core Middleware trait for SecurityMiddleware This allows it to be used in a MiddlewareChain

fn handle<'life0, 'async_trait>( &'life0 self, req: HttpRequest, next: Box<dyn FnOnce(HttpRequest) -> Pin<Box<dyn Future<Output = Result<HttpResponse, Error>> + Send>> + Send>, ) -> Pin<Box<dyn Future<Output = Result<HttpResponse, Error>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Process the request and optionally pass to next middleware