security

type ClientRateLimiter struct {
	// contains filtered or unexported fields
}

type CorsConfig struct {
	CorsEnabled      bool     `json:"corsEnabled""`
	AllowOrigins     []string `json:"allowOrigins"`
	AllowMethods     []string `json:"allowMethods"`
	AllowHeaders     []string `json:"allowHeaders"`
	ExposeHeaders    []string `json:"exposeHeaders"`
	AllowCredentials bool     `json:"allowCredentials"`
	MaxAge           int      `json:"maxAgeSeconds"`
	Vary             string   `json:"vary"`
	DevMode          bool     `json:"devMode"`
}

type SecurityConfig struct {
	// Content Security Policy
	CSP string

	// XSS Protection header
	XSSProtection string

	// X-Content-Type-Options header
	ContentTypeOptions string

	// Referrer-Policy header
	ReferrerPolicy string

	// Strict-Transport-Security header
	HSTS string

	// X-Frame-Options header
	FrameOptions string

	// Feature-Policy header
	FeaturePolicy string

	// Cache-Control header
	CacheControl string

	// Generate and add CSP nonce to requests
	UseCSPNonce bool

	// Rate limiting enabled
	EnableRateLimit bool

	// Rate limit per minute
	RateLimit int
}