secureHeaders

Kind: Function

Source: src/middleware/secure-headers/secure-headers.ts

Part of: Middleware

Secure Headers Middleware for Hono.

secureHeaders creates Hono middleware that adds security-related HTTP response headers. Register it on an application or route so matching responses include the configured header policies.

Signature

ts
function secureHeaders(customOptions: SecureHeadersOptions): MiddlewareHandler

Parameters

Returns: MiddlewareHandler

Diagram

mermaid
graph LR
  Client --> HonoApp
  HonoApp --> SecureHeaders[secureHeaders middleware]
  SecureHeaders --> Handler[Route handler]
  Handler --> Response
  SecureHeaders --> ResponseHeaders[Security response headers]
  ResponseHeaders --> Client

Usage

ts
import { Hono } from 'hono'
import { secureHeaders } from './middleware/secure-headers/secure-headers'

const app = new Hono()

app.use('*', secureHeaders())

app.get('/', (c) => {
  return c.text('Hello')
})

export default app

AI Coding Instructions

• Register secureHeaders() before route handlers so headers are applied to route responses.
• Apply the middleware globally with app.use() or scope it to routes that need the header policy.
• Keep header configuration close to application middleware setup to make policy changes easy to review.
• Check interactions with other middleware that sets response headers, since later middleware may replace header values.