Struct Helmet

pub struct Helmet {
    pub headers: Vec<Header>,
}

Helmet security headers middleware for ntex services

Examples

use helmet_core::Helmet;

let helmet = Helmet::default();

Adding custom headers

use helmet_core::{Helmet, StrictTransportSecurity};

let helmet = Helmet::new()
   .add(StrictTransportSecurity::new().max_age(31536000).include_sub_domains());

Fields

headers: Vec<Header>

Implementations

impl Helmet

pub fn new() -> Self

Create new Helmet instance without any headers applied

pub fn add(self, header: impl Into<Header>) -> Self

Add header to the middleware

Trait Implementations

impl Clone for Helmet

fn clone(&self) -> Helmet

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for Helmet

fn default() -> Self

Default Helmet instance with all headers applied

Content-Security-Policy: default-src 'self'; base-uri 'self'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; object-src 'none'; script-src 'self'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; upgrade-insecure-requests
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Strict-Transport-Security: max-age=15552000; includeSubDomains
X-Content-Type-Options: nosniff
X-DNS-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: sameorigin
X-Permitted-Cross-Domain-Policies: none
X-XSS-Protection: 0