Std.Http.Server.Security

4 public declarations

• constantTimeCompare&Str -> &Str -> Bool

  Compares tokens in constant time to prevent side-channel timing attacks.

  fn
• generateNonceInt -> Str

  Generates a hexadecimal nonce for per-request CSP inline script/style authorization.

  fn
• strictSecurityHeadersStr -> Array[(Str, Str)]

  Generates defense-in-depth HTTP security headers with strict CSP.

  fn
• verifyOriginOption[Str] -> Option[Str] -> Str -> Bool

  Validates that mutation requests originate from the expected host.

  fn