release: WRNexusJS 0.7.0
This commit is contained in:
@@ -0,0 +1,11 @@
|
||||
# @wrnexus/security
|
||||
|
||||
Secure-by-default utilities for WRNexusJS: bounded HTML-safe serialization, prototype-pollution rejection, URL policy, secure cookies, request hardening, security presets, and SSRF-safe remote fetches.
|
||||
|
||||
```ts
|
||||
import { safeFetch, securityPreset, setSecureCookie } from "@wrnexus/security";
|
||||
|
||||
export default { security: securityPreset("strict") };
|
||||
const response = await safeFetch(remoteUrl, { allowedHosts: ["api.example.com"] });
|
||||
setSecureCookie(ctx, "__Host-session", sessionId);
|
||||
```
|
||||
Reference in New Issue
Block a user