/**! * koa-lusca - lib/csp.js * * Copyright(c) 2014 - 2015 fengmk2 and other contributors. * MIT Licensed * * Authors: * fengmk2 (http://fengmk2.github.com) */ /*───────────────────────────────────────────────────────────────────────────*\ │ Copyright (C) 2014 eBay Software Foundation │ │ │ │hh ,'""`. │ │ / _ _ \ Licensed under the Apache License, Version 2.0 (the "License"); │ │ |(@)(@)| you may not use this file except in compliance with the License. │ │ ) __ ( You may obtain a copy of the License at │ │ /,'))((`.\ │ │(( (( )) )) http://www.apache.org/licenses/LICENSE-2.0 │ │ `\ `)(' /' │ │ │ │ Unless required by applicable law or agreed to in writing, software │ │ distributed under the License is distributed on an "AS IS" BASIS, │ │ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. │ │ See the License for the specific language governing permissions and │ │ limitations under the License. │ \*───────────────────────────────────────────────────────────────────────────*/ 'use strict'; /** * Outputs all security headers based on configuration * @param {Object} options The configuration object. */ var lusca = module.exports = function (options) { var headers = []; if (options) { Object.keys(lusca).forEach(function (key) { var config = options[key]; if (config) { headers.push(lusca[key](config)); } }); } var compose = require('koa-compose'); var mw = compose(headers); mw._name = 'lusca'; return mw; }; lusca.csrf = require('./lib/csrf'); lusca.csp = require('./lib/csp'); lusca.hsts = require('./lib/hsts'); lusca.p3p = require('./lib/p3p'); lusca.xframe = require('./lib/xframes'); lusca.xssProtection = require('./lib/xssprotection'); lusca.cto = require('./lib/cto');