Struct SecurityHeaders 

pub struct SecurityHeaders { /* private fields */ }

The security headers added to every reply web-net sends (pages, error pages, files, redirects), unless the handler set the same field itself.

The defaults are strict: a page may load scripts, styles, images, and fonts from its own origin only, may not be framed, and sends a short referrer to other origins. A site that needs more says so.

use web_net::SecurityHeaders;

let policy = SecurityHeaders::default()
    .content_security_policy("default-src 'self'; img-src 'self' https://cdn.example; frame-ancestors 'none'")
    .hsts(63_072_000, true);

Implementations

impl SecurityHeaders

pub fn none() -> Self

No security headers at all (x-content-type-options: nosniff is still sent: it has no cost and no downside).

pub fn content_security_policy(self, value: &str) -> Self

Content-Security-Policy.

pub fn no_content_security_policy(self) -> Self

No Content-Security-Policy.

pub fn frame_options(self, value: &str) -> Self

X-Frame-Options (DENY by default; SAMEORIGIN to allow the site’s own frames).

pub fn referrer_policy(self, value: &str) -> Self

Referrer-Policy.

pub fn permissions_policy(self, value: &str) -> Self

Permissions-Policy.

pub fn opener_policy(self, value: &str) -> Self

Cross-Origin-Opener-Policy.

pub fn hsts(self, max_age: u64, include_subdomains: bool) -> Self

Strict-Transport-Security, sent on HTTPS replies only and never to a development host. include_subdomains commits every subdomain to HTTPS too: set it only when they all have it.

pub fn no_hsts(self) -> Self

No Strict-Transport-Security.

Trait Implementations

impl Clone for SecurityHeaders

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityHeaders

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SecurityHeaders

fn default() -> Self

Returns the “default value” for a type.

impl Eq for SecurityHeaders

impl PartialEq for SecurityHeaders

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SecurityHeaders