aster_forge_middleware/shared/security_headers.rs
1//! Defaults only: product response headers take precedence; HTTPS termination owns HSTS.
2/// Default frame policy.
3pub const X_FRAME_OPTIONS_VALUE: &str = "SAMEORIGIN";
4/// Default referrer policy.
5pub const REFERRER_POLICY_VALUE: &str = "strict-origin-when-cross-origin";
6/// Default MIME-sniffing policy.
7pub const X_CONTENT_TYPE_OPTIONS_VALUE: &str = "nosniff";