Module security_headers 

Default security response headers for Actix Web services.

These headers are intentionally limited to generic browser hardening. HSTS is not set here because Aster services usually sit behind an HTTPS reverse proxy, and that proxy should own HTTPS termination policy.

Constants

REFERRER_POLICY_VALUE

Value used for the Referrer-Policy response header.

X_CONTENT_TYPE_OPTIONS_VALUE

Value used for the X-Content-Type-Options response header.

X_FRAME_OPTIONS_VALUE

Value used for the X-Frame-Options response header.

Functions

default_headers

Builds the default security headers middleware.