secureheaders

Aug 11, 2026

Changes in this version

+ func ContentSecurityPolicySource(u *url.URL) (source string)

type ResourceDestination

+ func InferResource(u *url.URL) (destinations ResourceDestination, matchedExtension string)

Aug 11, 2026

Changes in this version

+ func BuildContentSecurityPolicyForURLs(urls ...*url.URL) (value string)

Aug 11, 2026

Changes in this version

type ResourceDestination

+ func InferResourceDestinations(u *url.URL) (destinations ResourceDestination, recognized bool)

Aug 10, 2026

Changes in this version

+ type Resource struct

+ Destination ResourceDestination

+ URL *url.URL

+ type ResourceDestination uint8

+ const ResourceDestinationAuto

+ const ResourceDestinationConnect

+ const ResourceDestinationFont

+ const ResourceDestinationImage

+ const ResourceDestinationScript

+ const ResourceDestinationStyle

May 27, 2026

Changes in this version

type Middleware

+ Header http.Header

Apr 1, 2026

Changes in this version

+ var DefaultHeaders = http.Header

+ func BuildContentSecurityPolicy(resourceURLs []*url.URL) (value string, err error)

+ func RequestIsSecure(hr *http.Request, trustForwardedHeaders bool) (yes bool)

+ func SetHeaders(src http.Header, hw http.ResponseWriter, ishttps bool)

+ type Middleware struct

+ TrustForwardedHeaders bool

+ func (m Middleware) ServeHTTP(hw http.ResponseWriter, hr *http.Request)