@middy/http-security-headers 3.1.1 → 3.2.2

package/index.cjs

@@ -2,8 +2,11 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-module.exports = void 0;
-var _util = require("@middy/util");
+Object.defineProperty(module, "exports", {
+    enumerable: true,
+    get: ()=>_default
+});
+const _util = require("@middy/util");
 const defaults = {
     contentSecurityPolicy: {
         'default-src': "'none'",
@@ -190,7 +193,7 @@ const httpSecurityHeadersMiddleware = (opts = {})=>{
         ...opts
     };
     const httpSecurityHeadersMiddlewareAfter = async (request)=>{
-        (0, _util).normalizeHttpResponse(request);
+        (0, _util.normalizeHttpResponse)(request);
         Object.keys(helmet).forEach((key)=>{
             if (!options[key]) return;
             const config = {
@@ -219,8 +222,7 @@ const httpSecurityHeadersMiddleware = (opts = {})=>{
         onError: httpSecurityHeadersMiddlewareOnError
     };
 };
-var _default = httpSecurityHeadersMiddleware;
-module.exports = _default;
+const _default = httpSecurityHeadersMiddleware;
 
 
 //# sourceMappingURL=index.cjs.map

package/index.d.ts

@@ -28,8 +28,34 @@ interface Options {
   xssProtection?: {
     reportUri?: string
   }
+  contentSecurityPolicy?: Record<string, string>
+  crossOriginEmbedderPolicy?: {
+    policy?: string
+  }
+  crossOriginOpenerPolicy?: {
+    policy?: string
+  }
+  crossOriginResourcePolicy?: {
+    policy?: string
+  }
+  permissionsPolicy?: Record<string, string>
+  permittedCrossDomainPolicies?: {
+    policy?: string
+  }
+  reportTo?: {
+    maxAge?: number
+    default?: string
+    includeSubdomains?: boolean
+    csp?: string
+    staple?: string
+    xss?: string
+  }
 }
 
-declare function httpSecurityHeaders (options?: Options): middy.MiddlewareObj
+type WithFalseValues<T> = { [K in keyof T]: T[K] | false }
+
+declare function httpSecurityHeaders (
+  options?: WithFalseValues<Options>
+): middy.MiddlewareObj
 
 export default httpSecurityHeaders

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@middy/http-security-headers",
-  "version": "3.1.1",
+  "version": "3.2.2",
   "description": "Applies best practice security headers to responses. It's a simplified port of HelmetJS",
   "type": "module",
   "engines": {
@@ -64,11 +64,11 @@
     "url": "https://github.com/middyjs/middy/issues"
   },
   "homepage": "https://middy.js.org",
-  "gitHead": "d53fc91d035b01d3fd296cb6c7d0acd8305e9f76",
+  "gitHead": "4c960a361cc8844f7b2e6202d9544c852366fb01",
   "dependencies": {
-    "@middy/util": "3.1.1"
+    "@middy/util": "3.2.2"
   },
   "devDependencies": {
-    "@middy/core": "3.1.1"
+    "@middy/core": "3.2.2"
   }
 }