Options for HttpSecurityPlugin.
readonly
optional
cors: CorsOptions
CORS configuration. Presence enables CORS; absent means inactive.
readonly
optional
headers: SecurityHeadersOptions
Security headers configuration. Omitted → default secure header set.
{ enabled: false } → off. Sub-fields override individual headers.
readonly
optional
csrf: CsrfOptions
CSRF configuration. Presence enables CSRF; absent means inactive.
readonly
optional
requestSize: RequestSizeOptions
Request-size configuration. Presence enables size limiting; absent means inactive.
readonly
optional
ipSecurity: IpSecurityOptions
IP security configuration. Presence enables IP resolution; absent means inactive.