interface HttpSecurityPluginOptions

Options for HttpSecurityPlugin.

Properties

readonly
optional
cors: CorsOptions

CORS configuration. Presence enables CORS; absent means inactive.

Security headers configuration. Omitted → default secure header set. { enabled: false } → off. Sub-fields override individual headers.

readonly
optional
csrf: CsrfOptions

CSRF configuration. Presence enables CSRF; absent means inactive.

Request-size configuration. Presence enables size limiting; absent means inactive.

readonly
optional
ipSecurity: IpSecurityOptions

IP security configuration. Presence enables IP resolution; absent means inactive.

Usage

import { type HttpSecurityPluginOptions } from "http-security-plugin/src/index.ts";