OptionalcontentSecurityPolicy
contentSecurityPolicy?: boolean | ContentSecurityPolicyOptions
OptionalcrossOriginEmbedderPolicy
crossOriginEmbedderPolicy?: boolean | { policy?: string }
OptionalcrossOriginOpenerPolicy
crossOriginOpenerPolicy?: boolean | { policy?: string }
OptionalcrossOriginResourcePolicy
crossOriginResourcePolicy?: boolean | { policy?: string }
OptionaldnsPrefetchControl
dnsPrefetchControl?: boolean | { allow?: boolean }
Optionalframeguard
frameguard?: boolean | { action?: "deny" | "sameorigin" }
OptionalhidePoweredBy
hidePoweredBy?: boolean
Optionalhsts
hsts?: boolean | HstsOptions
OptionalieNoOpen
ieNoOpen?: boolean
OptionalnoSniff
noSniff?: boolean
OptionaloriginAgentCluster
originAgentCluster?: boolean
OptionalpermittedCrossDomainPolicies
permittedCrossDomainPolicies?: boolean | { permittedPolicies?: string }
OptionalreferrerPolicy
referrerPolicy?: boolean | { policy?: string | string[] }
OptionalxssFilter
xssFilter?: boolean