createSecurityMiddleware

createSecurityMiddleware(config): Middleware

Defined in: packages/middleware/src/security.ts:123

Create security headers middleware

Adds security headers to responses to protect against common vulnerabilities.

Parameters

config

SecurityConfig = {}

Security configuration

Returns

Middleware

Middleware function

Examples

import { createSecurityMiddleware } from 'ai.matey';

const security = createSecurityMiddleware({
  contentSecurityPolicy: "default-src 'self'",
  hsts: 'max-age=31536000',
});

bridge.use(security);

const productionSecurity = createSecurityMiddleware({
  contentSecurityPolicy: "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'",
  frameOptions: 'DENY',
  hsts: 'max-age=31536000; includeSubDomains; preload',
  referrerPolicy: 'strict-origin-when-cross-origin',
  permissionsPolicy: 'geolocation=(), microphone=(), camera=(), payment=()',
});