setSecurityHeaders method

void setSecurityHeaders({
  1. bool enableHsts = false,
  2. bool enableCsp = false,
  3. bool enableXFrameOptions = true,
  4. bool enableXContentTypeOptions = true,
  5. String? cspPolicy,
})

Sets common security headers.

Implementation

void setSecurityHeaders({
  bool enableHsts = false,
  bool enableCsp = false,
  bool enableXFrameOptions = true,
  bool enableXContentTypeOptions = true,
  String? cspPolicy,
}) {
  if (enableHsts) {
    setHeader(
      'Strict-Transport-Security',
      'max-age=31536000; includeSubDomains',
    );
  }
  if (enableCsp && cspPolicy != null) {
    setHeader('Content-Security-Policy', cspPolicy);
  }
  if (enableXFrameOptions) {
    setHeader('X-Frame-Options', 'DENY');
  }
  if (enableXContentTypeOptions) {
    setHeader('X-Content-Type-Options', 'nosniff');
  }
}