Optional ReadonlycontentContent-Security-Policy configuration.
Set to false to omit entirely.
undefined keeps the default (no CSP by default since it breaks apps).
Optional ReadonlyenabledEnable/disable all security headers. Defaults to true.
Optional ReadonlypermissionsPermissions-Policy value.
Set to false to omit. undefined uses default (none by default).
Optional ReadonlyreferrerReferrer-Policy value.
Set to false to omit. undefined uses default (no-referrer).
Optional ReadonlystrictStrict-Transport-Security configuration.
Set to false to omit. undefined uses defaults.
Optional ReadonlyxX-Content-Type-Options value.
Set to false to omit. undefined uses default (nosniff).
Optional ReadonlyxX-Frame-Options value.
Set to false to omit. undefined uses default (DENY).
Options for security headers middleware.