Crate axum_helmet 

Helmet middleware for axum.

Example

use axum::{routing::get, Router};
use axum_helmet::{Helmet, HelmetLayer};

#[tokio::main]
async fn main() {
    let layer: HelmetLayer = Helmet::default().try_into().unwrap();
    let app = Router::new()
        .route("/", get(|| async { "Hello, world!" }))
        .layer(layer);

    let listener = tokio::net::TcpListener::bind("0.0.0.0:3000").await.unwrap();
    axum::serve(listener, app).await.unwrap();
}

Structs

ContentSecurityPolicy

Manages Content-Security-Policy header

Helmet

Helmet header configuration wrapper.

HelmetInner

HelmetLayer

Create a tower::layer::Layer that adds helmet headers to responses.

OriginAgentCluster

Manages Origin-Agent-Cluster header

ResponseFuture

Response future for HelmetInner.

StrictTransportSecurity

Manages Strict-Transport-Security header

XPoweredBy

Manages X-Powered-By header

XXSSProtection

Manages X-XSS-Protection header

Enums

CrossOriginEmbedderPolicy

Manages Cross-Origin-Embedder-Policy header

CrossOriginOpenerPolicy

Manages Cross-Origin-Opener-Policy header

CrossOriginResourcePolicy

Manages Cross-Origin-Resource-Policy header

HelmetError

Error returned when a header name or value cannot be converted to a valid HTTP header.

ReferrerPolicy

Manages Referrer-Policy header

XContentTypeOptions

Manages X-Content-Type-Options header

XDNSPrefetchControl

Manages X-DNS-Prefetch-Control header

XDownloadOptions

Manages X-Download-Options header

XFrameOptions

Manages X-Frame-Options header

XPermittedCrossDomainPolicies

Manages X-Permitted-Cross-Domain-Policies header

Type Aliases

Header

Header trait