Enum XFrameOptions

pub enum XFrameOptions {
    Deny,
    SameOrigin,
    AllowFrom(String),
}

Manages X-Frame-Options header

The X-Frame-Options HTTP response header can be used to to avoid click-jacking attacks by preventing the content to be included in other websites.

Values

• deny: The page cannot be displayed in a frame, regardless of the site attempting to do so.
• sameorigin: The page can only be displayed in a frame on the same origin as the page itself.
• allow-from: The page can only be displayed in a frame on the specified origin. Requires a URI as an argument.

Examples

use helmet_core::XFrameOptions;

let x_frame_options = XFrameOptions::deny();

let x_frame_options = XFrameOptions::same_origin();

let x_frame_options = XFrameOptions::allow_from("https://example.com");

Variants

Deny

SameOrigin

AllowFrom(String)

Implementations

impl XFrameOptions

pub fn deny() -> Self

pub fn same_origin() -> Self

pub fn allow_from(uri: &str) -> Self

Trait Implementations

impl Clone for XFrameOptions

fn clone(&self) -> XFrameOptions

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Display for XFrameOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Into<(&'static str, String)> for XFrameOptions

fn into(self) -> Header

Converts this type into the (usually inferred) input type.