Skip to main content

Module security_headers

Module security_headers 

Source
Expand description

Browser security header defaults. Defaults only: product response headers take precedence; HTTPS termination owns HSTS.

Constantsยง

REFERRER_POLICY_VALUE
Default referrer policy.
X_CONTENT_TYPE_OPTIONS_VALUE
Default MIME-sniffing policy.
X_FRAME_OPTIONS_VALUE
Default frame policy.