Struct SecureHeadersLayer 

pub struct SecureHeadersLayer { /* private fields */ }

A Tower layer that adds security headers to every response.

Created via SecureHeadersLayer::new(), which sets sensible defaults. Individual headers can be overridden, disabled, or extended with the builder methods.

Implementations

impl SecureHeadersLayer

pub fn new() -> Self

Create a new layer with all default security headers enabled.

Default headers:

• X-Content-Type-Options: nosniff
• X-Frame-Options: DENY
• X-XSS-Protection: 0
• Referrer-Policy: strict-origin-when-cross-origin
• Content-Security-Policy: default-src 'self'
• Permissions-Policy: camera=(), microphone=(), geolocation=()

pub fn hsts(self, max_age_secs: u64) -> Self

Enable HTTP Strict Transport Security (HSTS) with the given max-age in seconds.

This header should only be enabled when the server is behind TLS. The includeSubDomains and preload directives are included automatically.

Example

SecureHeadersLayer::new().hsts(63_072_000) // 2 years

pub fn frame_options(self, value: impl Into<String>) -> Self

Override the X-Frame-Options header value.

Common values: "DENY", "SAMEORIGIN".

pub fn content_security_policy(self, value: impl Into<String>) -> Self

Override the Content-Security-Policy header value.

pub fn disable_csp(self) -> Self

Remove the Content-Security-Policy header entirely.

pub fn custom(self, name: impl Into<String>, value: impl Into<String>) -> Self

Add an arbitrary header name/value pair.

If the header already exists in the set, its value is replaced.

Trait Implementations

impl Clone for SecureHeadersLayer

fn clone(&self) -> SecureHeadersLayer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureHeadersLayer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecureHeadersLayer

fn default() -> Self

Returns the “default value” for a type.

impl<S> Layer<S> for SecureHeadersLayer

type Service = SecureHeadersService<S>

The wrapped service

fn layer(&self, inner: S) -> Self::Service

Wrap the given service with the middleware, returning a new service that has been decorated with the middleware.