Enum rocket_contrib::helmet::Frame

pub enum Frame {
    Deny,
    SameOrigin,
    AllowFrom(Uri<'static>),
}

The X-Frame-Options header: helps prevent clickjacking attacks.

Controls whether the browser should allow the page to render in a <frame>, <iframe> or <object>. This can be used to prevent clickjacking attacks.

Variants

Deny

Page cannot be displayed in a frame.

SameOrigin

Page can only be displayed in a frame if the page trying to render it is in the same origin. Interpretation of same-origin is browser dependent.

AllowFrom(Uri<'static>)

Page can only be displayed in a frame if the page trying to render it is in the origin for Uri. Interpretation of origin is browser dependent.

Trait Implementations

impl Default for Frame

Defaults to Frame::SameOrigin.

fn default() -> Frame

Returns the “default value” for a type.

impl<'a> Into<Header<'static>> for &'a Frame

fn into(self) -> Header<'static>

Converts this type into the (usually inferred) input type.

impl Policy for Frame

const NAME: &'static str = "X-Frame-Options"

The actual name of the HTTP header.

fn header(&self) -> Header<'static>

Returns the Header to attach to all outgoing responses.