Struct HeadersCfg 

pub struct HeadersCfg {
    pub hsts: bool,
    pub csp: String,
    pub csp_report_only: bool,
    pub csp_report_uri: String,
    pub referrer_policy: String,
    pub permissions_policy: String,
    pub frame_options: String,
    pub force_secure_cookies: bool,
    pub httponly_cookies: bool,
    pub httponly_cookie_exempt: Vec<String>,
    pub strip: Vec<String>,
}

Fields

hsts: bool

csp: String

csp_report_only: bool

Send the CSP as Content-Security-Policy-Report-Only instead of enforcing it. Lets you roll out / tighten a policy by collecting violations first without breaking the page.

csp_report_uri: String

If set, a report-uri <value> directive is appended to the CSP so browsers POST violation reports there. Point it at EdgeGuard’s own sink (“/__edgeguard/csp-report”) to have them logged, or at any external collector.

referrer_policy: String

permissions_policy: String

frame_options: String

force_secure_cookies: bool

httponly_cookies: bool

Add HttpOnly to Set-Cookie responses that lack it. On by default. Turn off (or use httponly_cookie_exempt) for apps that intentionally expose a cookie to JavaScript — e.g. a double-submit CSRF token the frontend must read from document.cookie.

httponly_cookie_exempt: Vec<String>

Cookie NAMES that must never get HttpOnly, even when httponly_cookies is on. The surgical exemption for a readable double-submit CSRF cookie, e.g. ["doneyet_csrf"]. Names match exactly (cookies are case-sensitive).

strip: Vec<String>

Response headers to strip (case-insensitive), e.g. [“Server”, “X-Powered-By”].

Trait Implementations

impl Clone for HeadersCfg

fn clone(&self) -> HeadersCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HeadersCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HeadersCfg

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for HeadersCfg

where HeadersCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.