Crate axum_helmet
source ·Expand description
Helmet middleware for axum.
Example
use axum::{routing::get, Router};
use axum_helmet::{Helmet, HelmetLayer};
use helmet_core::Helmet as HelmetCore;
#[tokio::main]
async fn main() {
let app = Router::new()
.route("/", get(|| async { "Hello, world!" }))
.layer(HelmetLayer::new(
Helmet::new()
.add(helmet_core::XContentTypeOptions::nosniff())
.add(helmet_core::XFrameOptions::same_origin())
.add(helmet_core::XXSSProtection::on().mode_block()),
));
let listener = tokio::net::TcpListener::bind("0.0.0.0:3000").await.unwrap();
axum::serve(listener, app).await.unwrap();
}Structs
- Manages
Content-Security-Policyheader - Helmet security headers middleware for ntex services
- Create a [
tower::layer::Layer] that adds helmet headers to responses. Seehelmet_core::Helmetfor more details. - Manages
Origin-Agent-Clusterheader - Response future for [
SetResponseHeader]. - Manages
Strict-Transport-Securityheader - Manages
X-Powered-Byheader - Manages
X-XSS-Protectionheader
Enums
- Manages
Content-Security-Policyheader - Manages
Cross-Origin-Embedder-Policyheader - Manages
Cross-Origin-Opener-Policyheader - Manages
Cross-Origin-Resource-Policyheader - Manages
Referrer-Policyheader - Manages
X-Content-Type-Optionsheader - Manages
X-DNS-Prefetch-Controlheader - Manages
X-Download-Optionsheader - Manages
X-Frame-Optionsheader - Manages
X-Permitted-Cross-Domain-Policiesheader
Traits
- Header trait