/Knowledge/sources/honojs__hono/llms-full/secure-headers-middleware-supported-options--part-02--239376b44156.md
Secure Headers Middleware: Supported Options (part 02) - hono-docs
Secure Headers Middleware: Supported Options (part 02) Source evidence: /Sources/honojs hono/provenance.md Canonical citation: https://hono.dev/llms full.txt...
Secure Headers Middleware: Supported Options (part 02)
Source evidence: /Sources/honojs__hono/provenance.md Canonical citation: https://hono.dev/llms-full.txt#supported-options
Summary
| Option | Header | Value | Default | | ------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- | ------------------...
Content
| Option | Header | Value | Default |
|---|---|---|---|
| - | X-Powered-By | (Delete Header) | True |
| contentSecurityPolicy | Content-Security-Policy | Usage: Setting Content-Security-Policy | No Setting |
| contentSecurityPolicyReportOnly | Content-Security-Policy-Report-Only | Usage: Setting Content-Security-Policy | No Setting |
| trustedTypes | Trusted Types | Usage: Setting Content-Security-Policy | No Setting |
| requireTrustedTypesFor | Require Trusted Types For | Usage: Setting Content-Security-Policy | No Setting |
| crossOriginEmbedderPolicy | Cross-Origin-Embedder-Policy | require-corp | False |
| crossOriginResourcePolicy | Cross-Origin-Resource-Policy | same-origin | True |
| crossOriginOpenerPolicy | Cross-Origin-Opener-Policy | same-origin | True |
| originAgentCluster | Origin-Agent-Cluster | ?1 | True |
| referrerPolicy | Referrer-Policy | no-referrer | True |
| reportingEndpoints | Reporting-Endpoints | Usage: Setting Content-Security-Policy | No Setting |
| reportTo | Report-To | Usage: Setting Content-Security-Policy | No Setting |
| strictTransportSecurity | Strict-Transport-Security | max-age=15552000; includeSubDomains | True |
| xContentTypeOptions | X-Content-Type-Options | nosniff | True |
| xDnsPrefetchControl | X-DNS-Prefetch-Control | off | True |
| xDownloadOptions | X-Download-Options | noopen | True |
| xFrameOptions | X-Frame-Options | SAMEORIGIN | True |
| xPermittedCrossDomainPolicies | X-Permitted-Cross-Domain-Policies | none | True |
| xXssProtection | X-XSS-Protection | 0 | True |
| permissionPolicy | Permissions-Policy | Usage: Setting Permission-Policy | No Setting |
Metadata
{
"chunk_index": 1,
"citation": "https://hono.dev/llms-full.txt#supported-options",
"coverage_role": "overview",
"qualified_title": "Hono / llms-full / Secure Headers Middleware > Supported Options (2)",
"retrieved_at": "2026-07-02T05:51:01Z",
"section_index": 229,
"source_id": "/honojs/hono",
"source_type": "llms_full",
"target_label": "llms-full",
"title": "Secure Headers Middleware: Supported Options (part 02)",
"upstream_url": "https://hono.dev/llms-full.txt",
"version": "2026"
}