get_security_headers

Get security headers to add to HTTP responses.

Parameters

is_https

boolDefaults to false

Whether the connection is over HTTPS. When True and use_hsts is enabled, the Strict-Transport-Security header is included.

Returns

dict[str, str] — Dictionary of security headers including X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, and optionally Strict-Transport-Security.

Example

1 from signalwire.core.security_config import SecurityConfig
2 
3 security = SecurityConfig()
4 headers = security.get_security_headers(is_https=False)
5 https_headers = security.get_security_headers(is_https=True)
6 
7 print(headers)
8 # {'X-Content-Type-Options': 'nosniff', 'X-Frame-Options': 'DENY', ...}
9 print(https_headers)
10 # Includes 'Strict-Transport-Security' header when HSTS is enabled