SecureHeadersOptions

Options of the secure response headers. Each value can be replaced, or false to omit the header.

Import#

import type { SecureHeadersOptions } from "@shadow-js/dusk/server";

Signature#

interface SecureHeadersOptions {
  readonly contentTypeOptions?: false | string;
  readonly referrerPolicy?: false | string;
  readonly permissionsPolicy?: false | string;
  readonly frameOptions?: false | "DENY" | "SAMEORIGIN";
  readonly crossOriginOpenerPolicy?: false | string;
  readonly crossOriginResourcePolicy?: false | string;
  /** Opt-in. Only sent on https requests. */
  readonly hsts?:
    | false
    | { readonly maxAge: number; readonly includeSubDomains?: boolean; readonly preload?: boolean };
}

Members#

Name	Type	Description
`contentTypeOptions?`	`readonly contentTypeOptions?: false \| string`
`referrerPolicy?`	`readonly referrerPolicy?: false \| string`
`permissionsPolicy?`	`readonly permissionsPolicy?: false \| string`
`frameOptions?`	`readonly frameOptions?: false \| "DENY" \| "SAMEORIGIN"`
`crossOriginOpenerPolicy?`	`readonly crossOriginOpenerPolicy?: false \| string`
`crossOriginResourcePolicy?`	`readonly crossOriginResourcePolicy?: false \| string`
`hsts?`	`readonly hsts?: \| false \| { readonly maxAge: number; readonly includeSubDomains?: boolean; readonly preload?: boolean }`	Opt-in. Only sent on https requests.