@@ -12,12 +12,12 @@ type (
1212 // XSSProtection provides protection against cross-site scripting attack (XSS)
1313 // by setting the `X-XSS-Protection` header.
1414 // Optional. Default value "1; mode=block".
15- XSSProtection string
15+ XSSProtection string `json:"xss_protection"`
1616
1717 // ContentTypeNosniff provides protection against overriding Content-Type
1818 // header by setting the `X-Content-Type-Options` header.
1919 // Optional. Default value "nosniff".
20- ContentTypeNosniff string
20+ ContentTypeNosniff string `json:"content_type_nosniff"`
2121
2222 // XFrameOptions can be used to indicate whether or not a browser should
2323 // be allowed to render a page in a <frame>, <iframe> or <object> .
@@ -29,27 +29,27 @@ type (
2929 // `SAMEORIGIN` - The page can only be displayed in a frame on the same origin as the page itself.
3030 // `DENY` - The page cannot be displayed in a frame, regardless of the site attempting to do so.
3131 // `ALLOW-FROM uri` - The page can only be displayed in a frame on the specified origin.
32- XFrameOptions string
32+ XFrameOptions string `json:"x_frame_options"`
3333
3434 // HSTSMaxAge sets the `Strict-Transport-Security` header to indicate how
3535 // long (in seconds) browsers should remember that this site is only to
3636 // be accessed using HTTPS. This reduces your exposure to some SSL-stripping
3737 // man-in-the-middle (MITM) attacks.
3838 // Optional. Default value 0.
39- HSTSMaxAge int
39+ HSTSMaxAge int `json:"hsts_max_age"`
4040
4141 // HSTSExcludeSubdomains won't include subdomains tag in the `Strict Transport Security`
4242 // header, excluding all subdomains from security policy. It has no effect
4343 // unless HSTSMaxAge is set to a non-zero value.
4444 // Optional. Default value false.
45- HSTSExcludeSubdomains bool
45+ HSTSExcludeSubdomains bool `json:"hsts_exclude_subdomains"`
4646
4747 // ContentSecurityPolicy sets the `Content-Security-Policy` header providing
4848 // security against cross-site scripting (XSS), clickjacking and other code
4949 // injection attacks resulting from execution of malicious content in the
5050 // trusted web page context.
5151 // Optional. Default value "".
52- ContentSecurityPolicy string
52+ ContentSecurityPolicy string `json:"content_security_policy"`
5353 }
5454)
5555
0 commit comments