Struct Csp 

pub struct Csp { /* private fields */ }

A Content-Security-Policy under construction

A value of 'nonce-{nonce}' in any directive is replaced with a fresh random nonce per request, readable through Request::csp_nonce for inline <script nonce="..."> tags.

Implementations

impl Csp

pub fn new() -> Self

Empty policy

pub fn api() -> Self

For JSON APIs: nothing may load or embed anything

pub fn web() -> Self

For server-rendered pages: same-origin resources only, no plugins, no framing, forms post to the same origin

pub fn directive<I, S>(self, name: &str, values: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Set (replace) a directive

pub fn script_src<I, S>(self, values: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn style_src<I, S>(self, values: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn img_src<I, S>(self, values: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn connect_src<I, S>(self, values: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

pub fn report_uri(self, uri: &str) -> Self

Where browsers send violation reports (report-uri)

pub fn report_only(self) -> Self

Deliver as Content-Security-Policy-Report-Only: violations are reported, nothing is blocked. Useful to roll a policy out.

Trait Implementations

impl Clone for Csp

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Csp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Csp

fn default() -> Self

Returns the “default value” for a type.