import type { Middleware } from './types.js';
export interface SecurityHeadersOptions {
    /** Set to false to disable a header. Defaults shown below. */
    contentTypeOptions?: string | false;
    frameOptions?: string | false;
    referrerPolicy?: string | false;
    /** Opt-in; no default CSP (apps vary widely). */
    contentSecurityPolicy?: string | false;
}
export declare function createSecurityHeadersMiddleware(options?: SecurityHeadersOptions): Middleware;
//# sourceMappingURL=security-headers.d.ts.map