NAME

Plack::Middleware::SecureHeaders - manage security headers middleware

SYNOPSIS

            

              
              
use Plack::Builder;
builder {
    enable 'SecureHeaders';
    $app;
};
            
          

DESCRIPTION

This middleware manages HTTP headers to protect against XSS attacks, insecure connections, content type sniffing, etc. Specifically, this module manages two things. One is Content-Type validation. Second is using HTTP::SecureHeaders to set secure HTTP headers.

NOTE: To protect against these attacks, sanitization of user input values and other protections are also required.

OPTIONS

Secure HTTP headers can be changed as follows:

            

              
              
use Plack::Builder;
builder {
    enable 'SecureHeaders',
        secure_headers => HTTP::SecureHeaders->new(
            x_frame_options => 'DENY'
        );
    $app;
};
            
          

SEE ALSO

HTTP::SecureHeaders

LICENSE

Copyright (C) kfly8.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

AUTHOR

kfly8 <kfly@cpan.org>