Struct PageOutput 

#[non_exhaustive]
pub struct PageOutput {
    pub html: String,
    pub csp: String,
    pub nonce: CspNonce,
}

Output from render_page: HTML body + CSP header value + the nonce binding them together.

The HTML and the CSP header are a single unit — the HTML embeds a per-request nonce that only this policy blesses. Serve them together with Cache-Control: no-store and never cache the HTML across requests: a cached body with a fresh policy kills every script, and caching both ships one static, publicly-known nonce to every user, which defeats nonce-based CSP entirely.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

html: String

The complete HTML document.

csp: String

The Content-Security-Policy header value that blesses it.

nonce: CspNonce

The nonce embedded in html and blessed by csp.

Exposed so a caller can add its own nonced <script>/<style>, or re-stamp a cached shell, without string-parsing the CSP.

Implementations

impl PageOutput

pub fn headers(&self) -> Vec<(HeaderName, HeaderValue)>

Response headers for this page: content type, no-store, and the CSP.

Reads the (public, mutable) csp field, so a caller that must rewrite a directive can do so in place first and still use this helper.

Trait Implementations

impl Debug for PageOutput

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.