Expand description
Default security response headers for Actix Web services.
These headers are intentionally limited to generic browser hardening. HSTS is not set here because Aster services usually sit behind an HTTPS reverse proxy, and that proxy should own HTTPS termination policy.
Re-exports§
pub use crate::shared::security_headers::REFERRER_POLICY_VALUE;pub use crate::shared::security_headers::X_CONTENT_TYPE_OPTIONS_VALUE;pub use crate::shared::security_headers::X_FRAME_OPTIONS_VALUE;
Functions§
- default_
headers - Builds the default security headers middleware.