public CustomHeadersMiddleware(AppFunc next, PolicyHeaderCollection policies)
{
_next = next;
_policies = policies;
}
/// <summary>
/// Add policy X-Content-Type-option to response
/// </summary>
/// <param name="policies">The collection of policies</param>
/// <returns>The collection of policies</returns>
public static PolicyHeaderCollection AddContentTypeHeaderNosniff(this PolicyHeaderCollection policies)
{
return(policies.ApplyPolicy(ContentTypeHeaderOption.Nosniff()));
}
public static PolicyHeaderCollection AddHeadersSecurity(this PolicyHeaderCollection policies)
{
policies.AddContentTypeHeaderNosniff();
return(policies);
}
/// <summary>
/// Adds middleware to web application pipeline to add security headers to response
/// </summary>
/// <param name="appBuilder">the application builder passed to the Config method.</param>
public static void UseCostumHeadersMiddleware(this IAppBuilder appBuilder, PolicyHeaderCollection policies)
{
appBuilder.Use <CustomHeadersMiddleware>(policies);
}
/// <summary>
/// Add policy to policy collection
/// </summary>
/// <param name="policies"></param>
/// <param name="headerOption"></param>
/// <returns></returns>
public static PolicyHeaderCollection ApplyPolicy(this PolicyHeaderCollection policies, IHeaderOption headerOption)
{
policies[headerOption.Header] = headerOption;
return(policies);
}
