Struct Helmet 

pub struct Helmet { /* private fields */ }

The set of security headers to apply to every response.

All headers are configured through a builder-style API. Call Helmet::new() (or Default::default()) to start from the secure defaults, then chain methods to customise individual headers.

Examples

use rune_axum_helmet::{Helmet, Hsts, XFrameOptions};

let helmet = Helmet::new()
    .frame_options(XFrameOptions::Deny)
    .hsts(Hsts::new().max_age(63_072_000))
    .csp("default-src 'self'");

Implementations

impl Helmet

pub fn new() -> Helmet

Creates a new Helmet with secure defaults applied.

pub fn frame_options(self, value: XFrameOptions) -> Helmet

Sets the X-Frame-Options header.

pub fn no_frame_options(self) -> Helmet

Removes the X-Frame-Options header entirely.

pub fn hsts(self, hsts: Hsts) -> Helmet

Sets the Strict-Transport-Security header.

pub fn csp(self, policy: impl Into<String>) -> Helmet

Sets the Content-Security-Policy header to a raw policy string.

pub fn referrer_policy(self, policy: ReferrerPolicy) -> Helmet

Sets the Referrer-Policy header.

pub fn cross_origin_opener_policy( self, policy: CrossOriginOpenerPolicy, ) -> Helmet

Sets the Cross-Origin-Opener-Policy header.

pub fn cross_origin_resource_policy( self, policy: CrossOriginResourcePolicy, ) -> Helmet

Sets the Cross-Origin-Resource-Policy header.

pub fn cross_origin_embedder_policy( self, policy: CrossOriginEmbedderPolicy, ) -> Helmet

Sets the Cross-Origin-Embedder-Policy header.

pub fn permissions_policy(self, policy: impl Into<String>) -> Helmet

Sets the Permissions-Policy header to a raw policy string.

Trait Implementations

impl Clone for Helmet

fn clone(&self) -> Helmet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Helmet

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for Helmet

fn default() -> Helmet

Returns the “default value” for a type.