Skip to content

SecurityHeadersOptions

Defined in: src/plugins/security-headers.ts:4

optional contentSecurityPolicy: boolean | Record<string, any>

Defined in: src/plugins/security-headers.ts:5


optional crossOriginEmbedderPolicy: boolean

Defined in: src/plugins/security-headers.ts:6


optional crossOriginOpenerPolicy: boolean

Defined in: src/plugins/security-headers.ts:7


optional crossOriginResourcePolicy: boolean

Defined in: src/plugins/security-headers.ts:8


optional dnsPrefetchControl: boolean | { allow: boolean; }

Defined in: src/plugins/security-headers.ts:9


optional expectCt: boolean | { enforce?: boolean; maxAge?: number; reportUri?: string; }

Defined in: src/plugins/security-headers.ts:10


optional frameguard: boolean | { action: "deny" | "sameorigin" | "allow-from"; domain?: string; }

Defined in: src/plugins/security-headers.ts:11


optional hidePoweredBy: boolean

Defined in: src/plugins/security-headers.ts:12


optional hsts: boolean | { includeSubDomains?: boolean; maxAge?: number; preload?: boolean; }

Defined in: src/plugins/security-headers.ts:13


optional ieNoOpen: boolean

Defined in: src/plugins/security-headers.ts:14


optional noSniff: boolean

Defined in: src/plugins/security-headers.ts:15


optional originAgentCluster: boolean

Defined in: src/plugins/security-headers.ts:16


optional permittedCrossDomainPolicies: boolean | { permittedPolicies: "none" | "all" | "master-only" | "by-content-type"; }

Defined in: src/plugins/security-headers.ts:17


optional referrerPolicy: boolean | { policy: string | string[]; }

Defined in: src/plugins/security-headers.ts:18


optional xssFilter: boolean

Defined in: src/plugins/security-headers.ts:19