Skip to main content
Using Deno in production at your company? Earn free Deno merch.
Give us feedback
Module

x/keywork/http/headers/mod.ts>SecurityHeaders

A library for building V8 Isolate web apps on Cloudflare Workers, Deno, and Node.JS
nirrius/keywork
Latest
interface SecurityHeaders
import { type SecurityHeaders } from "https://deno.land/x/keywork@v6.2.1/http/headers/mod.ts";

Properties

Cross-Origin-Embedder-Policy: string

Allows a server to declare an embedder policy for a given document.

Cross-Origin-Opener-Policy: string

Prevents other domains from opening/controlling a window.

Cross-Origin-Resource-Policy: string

Prevents other domains from reading the response of the resources to which this header is applied.

Content-Security-Policy: string

Controls resources the user agent is allowed to load for a given page.

Content-Security-Policy-Report-Only: string

Allows web developers to experiment with policies by monitoring, but not enforcing, their effects. These violation reports consist of JSON documents sent via an HTTP POST request to the specified URI.

Expect-CT: string

Allows sites to opt in to reporting and/or enforcement of Certificate Transparency requirements, which prevents the use of misissued certificates for that site from going unnoticed. When a site enables the Expect-CT header, they are requesting that Chrome check that any certificate for that site appears in public CT logs.

Feature-Policy: string

Provides a mechanism to allow and deny the use of browser features in its own frame, and in iframes that it embeds.

Origin-Isolation: string
Strict-Transport-Security: string

Force communication using HTTPS instead of HTTP.

Upgrade-Insecure-Requests: string

Sends a signal to the server expressing the client's preference for an encrypted and authenticated response, and that it can successfully handle the "upgrade-insecure-requests" directive.