handler property

@override MiddlewareHandler get handler

Implementation

@override
MiddlewareHandler get handler => (req, res, next) async {
      // Prevent MIME type sniffing
      res.header('X-Content-Type-Options', 'nosniff');

      // Prevent clickjacking
      res.header('X-Frame-Options', 'DENY');

      // Enable XSS filtering
      res.header('X-XSS-Protection', '1; mode=block');

      // Enforce HTTPS (HSTS) - 1 year
      // Only effective if served over HTTPS, but good practice to include
      res.header(
        'Strict-Transport-Security',
        'max-age=31536000; includeSubDomains',
      );

      // Referrer Policy
      res.header('Referrer-Policy', 'strict-origin-when-cross-origin');

      await next();
    };