RealmSecurityDefensesHeaders

data class RealmSecurityDefensesHeaders(val contentSecurityPolicy: String? = null, val contentSecurityPolicyReportOnly: String? = null, val referrerPolicy: String? = null, val strictTransportSecurity: String? = null, val xContentTypeOptions: String? = null, val xFrameOptions: String? = null, val xRobotsTag: String? = null, val xXssProtection: String? = null)

Constructors

Link copied to clipboard
constructor(contentSecurityPolicy: String? = null, contentSecurityPolicyReportOnly: String? = null, referrerPolicy: String? = null, strictTransportSecurity: String? = null, xContentTypeOptions: String? = null, xFrameOptions: String? = null, xRobotsTag: String? = null, xXssProtection: String? = null)

Types

Link copied to clipboard
object Companion

Properties

Link copied to clipboard

Sets the Content Security Policy, which can be used for prevent pages from being included by non-origin iframes. More information can be found in the W3C-CSP Abstract.

Link copied to clipboard

Used for testing Content Security Policies.

Link copied to clipboard
val referrerPolicy: String? = null

The Referrer-Policy HTTP header controls how much referrer information (sent with the Referer header) should be included with requests.

Link copied to clipboard

The Script-Transport-Security HTTP header tells browsers to always use HTTPS.

Link copied to clipboard

Sets the X-Content-Type-Options, which can be used for prevent MIME-sniffing a response away from the declared content-type

Link copied to clipboard
val xFrameOptions: String? = null

Sets the x-frame-option, which can be used to prevent pages from being included by non-origin iframes. More information can be found in the RFC7034

Link copied to clipboard
val xRobotsTag: String? = null

Prevent pages from appearing in search engines.

Link copied to clipboard
val xXssProtection: String? = null

This header configures the Cross-site scripting (XSS) filter in your browser.