Struct CspConfig 

#[non_exhaustive]
pub struct CspConfig {
    pub directives: HashMap<String, Vec<String>>,
    pub report_only: bool,
    pub include_nonce: bool,
    pub exempt_paths: HashSet<String>,
}

Available on (crate features standard or middleware) and native only.

CSP directive configuration

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

directives: HashMap<String, Vec<String>>

CSP directives (e.g., “default-src”, “script-src”)

report_only: bool

Enable Report-Only mode (for testing without blocking)

include_nonce: bool

Generate nonce for inline scripts/styles

exempt_paths: HashSet<String>

Paths exempt from CSP header insertion.

When a request path matches an exempt prefix (with path-segment boundary checking), the middleware skips CSP header insertion entirely, allowing the handler’s own CSP to take effect without interference.

This is useful when certain routes (e.g., admin panel) set their own CSP headers that differ from the application-wide policy.

Implementations

impl CspConfig

pub fn strict() -> CspConfig

Create a strict CSP configuration

Returns a configuration with restrictive directives suitable for high-security applications.

Examples

use reinhardt_middleware::CspConfig;

let config = CspConfig::strict();
assert!(config.directives.contains_key("default-src"));
assert!(config.directives.contains_key("script-src"));
assert!(!config.report_only);

pub fn add_exempt_path(self, path: String) -> CspConfig

Add a path prefix exempt from CSP header insertion.

Requests whose path matches this prefix (with path-segment boundary checking) will not have CSP headers set by this middleware, allowing handler-set CSP to take effect without interference.

Uses the same boundary matching as CsrfMiddlewareConfig::add_exempt_path: exempting "/admin" matches "/admin" and "/admin/dashboard" but NOT "/administrator".

Examples

use reinhardt_middleware::CspConfig;

let config = CspConfig::strict()
    .add_exempt_path("/admin".to_string())
    .add_exempt_path("/static/admin".to_string());

assert!(config.exempt_paths.contains("/admin"));
assert!(config.exempt_paths.contains("/static/admin"));

Trait Implementations

impl Clone for CspConfig

fn clone(&self) -> CspConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CspConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for CspConfig

fn default() -> CspConfig

Returns the “default value” for a type.