|
23 | 23 | //!
|
24 | 24 | //! # Supported Headers
|
25 | 25 | //!
|
26 |
| -//! | HTTP Header | Description | Policy | Default? | |
27 |
| -//! | --------------------------- | -------------------------------------- | ------------ | -------- | |
28 |
| -//! | [X-XSS-Protection] | Prevents some reflected XSS attacks. | [`XssFilter`] | ✔ | |
29 |
| -//! | [X-Content-Type-Options] | Prevents client sniffing of MIME type. | [`NoSniff`] | ✔ | |
30 |
| -//! | [X-Frame-Options] | Prevents [clickjacking]. | [`Frame`] | ✔ | |
31 |
| -//! | [Strict-Transport-Security] | Enforces strict use of HTTPS. | [`Hsts`] | ? | |
32 |
| -//! | [Expect-CT] | Enables certificate transparency. | [`ExpectCt`] | ✗ | |
33 |
| -//! | [Referrer-Policy] | Enables referrer policy. | [`Referrer`] | ✗ | |
| 26 | +//! | HTTP Header | Description | Policy | Default? | |
| 27 | +//! | --------------------------- | -------------------------------------- | ------------- | -------- | |
| 28 | +//! | [X-XSS-Protection] | Prevents some reflected XSS attacks. | [`XssFilter`] | ✔ | |
| 29 | +//! | [X-Content-Type-Options] | Prevents client sniffing of MIME type. | [`NoSniff`] | ✔ | |
| 30 | +//! | [X-Frame-Options] | Prevents [clickjacking]. | [`Frame`] | ✔ | |
| 31 | +//! | [Strict-Transport-Security] | Enforces strict use of HTTPS. | [`Hsts`] | ? | |
| 32 | +//! | [Expect-CT] | Enables certificate transparency. | [`ExpectCt`] | ✗ | |
| 33 | +//! | [Referrer-Policy] | Enables referrer policy. | [`Referrer`] | ✗ | |
34 | 34 | //!
|
35 | 35 | //! <small>? If TLS is enabled when the application is launched, in a
|
36 | 36 | //! non-development environment (e.g., staging or production), HSTS is
|
|
45 | 45 | //! [Referrer-Policy]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
46 | 46 | //! [clickjacking]: https://en.wikipedia.org/wiki/Clickjacking
|
47 | 47 | //!
|
48 |
| -//! [`XssFilter`]: helmet::XssFilter |
49 |
| -//! [`NoSniff`]: helmet::NoSniff |
50 |
| -//! [`Frame`]: helmet::Frame |
51 |
| -//! [`Hsts`]: helmet::Hsts |
52 |
| -//! [`ExpectCt`]: helmet::ExpectCt |
53 |
| -//! [`Referrer`]: helmet::Referrer |
| 48 | +//! [`XssFilter`]: self::XssFilter |
| 49 | +//! [`NoSniff`]: self::NoSniff |
| 50 | +//! [`Frame`]: self::Frame |
| 51 | +//! [`Hsts`]: self::Hsts |
| 52 | +//! [`ExpectCt`]: self::ExpectCt |
| 53 | +//! [`Referrer`]: self::Referrer |
54 | 54 | //!
|
55 | 55 | //! # Usage
|
56 | 56 | //!
|
|
0 commit comments