function HttpSecurityPlugin
HttpSecurityPlugin(options?: HttpSecurityPluginOptions): IPlugin

HttpSecurityPlugin factory.

Creates a middleware-only plugin that registers security concerns:

  • Security headers (ON by default)
  • CORS (opt-in via cors option block)
  • CSRF (opt-in via csrf option block)
  • Request-size (opt-in via requestSize option block)
  • IP security (opt-in via ipSecurity option block)

Examples

Example 1

app.register(HttpSecurityPlugin({
  cors: { origin: 'https://example.com', credentials: true },
  csrf: { trustedOrigins: ['https://example.com'] },
}));

Parameters

optional
options: HttpSecurityPluginOptions

Plugin configuration options

Return Type

IPlugin

A configured IPlugin instance

Usage

import { HttpSecurityPlugin } from "http-security-plugin/src/index.ts";