Expand description
Framework-neutral middleware kernels shared by both transports. Framework-neutral HTTP middleware mechanisms; product policy lives at transport boundaries.
Modulesยง
- cors
- Runtime CORS policies, preflight and response header mechanics. Shared runtime CORS policy, preflight validation and response headers.
- csrf
- CSRF tokens, source validation and typed errors. Framework-neutral CSRF token and request-source validation.
- rate_
limit - Governor quotas and normalized keyed limiting. Framework-neutral governor quotas and normalized keyed rate limiting.
- security_
headers - Browser security header defaults. Defaults only: product response headers take precedence; HTTPS termination owns HSTS.