release: WRNexusJS 0.7.0

2026-08-01 10:04:42 +05:30
parent c54144f2e4
commit 87507edf59
207 changed files with 12607 additions and 679 deletions
@@ -0,0 +1,42 @@
+import type { SecurityConfig } from "@wrnexus/core";
+
+export type SecurityPreset = "balanced" | "strict" | "api";
+
+export function securityPreset(preset: SecurityPreset = "balanced"): SecurityConfig {
+  if (preset === "api") {
+    return {
+      contentSecurityPolicy: false,
+      frameOptions: "DENY",
+      crossOriginOpenerPolicy: "same-origin",
+      referrerPolicy: "no-referrer",
+      permissionsPolicy: {},
+      extraHeaders: {
+        "Cross-Origin-Resource-Policy": "same-origin",
+        "Cache-Control": "no-store",
+      },
+    };
+  }
+  if (preset === "strict") {
+    return {
+      contentSecurityPolicy: {
+        useDefaults: true,
+        directives: {
+          "style-src": ["'self'"],
+          "script-src": ["'self'"],
+          "upgrade-insecure-requests": [],
+        },
+      },
+      trustedTypes: { enabled: true, policyNames: ["wrnexus"], requireForScript: true },
+      hsts: { enabled: true, maxAge: 63_072_000, includeSubDomains: true, preload: true },
+      extraHeaders: {
+        "Cross-Origin-Resource-Policy": "same-origin",
+        "Origin-Agent-Cluster": "?1",
+      },
+    };
+  }
+  return {
+    contentSecurityPolicy: { useDefaults: true },
+    trustedTypes: { enabled: true, requireForScript: true },
+    extraHeaders: { "Cross-Origin-Resource-Policy": "same-origin" },
+  };
+}