/// import { Response } from '@loopback/rest'; import { SecurityHeadersConfig } from '../types'; import { SecurityLogger } from '../utils/security-logger'; /** * Security headers handler that applies security-related HTTP headers */ export declare class SecurityHeadersHandler { private config?; private logger?; constructor(config?: SecurityHeadersConfig | undefined, logger?: SecurityLogger | undefined); /** * Apply security headers to response */ applyHeaders(res: Response): Promise; /** * Set Content Security Policy header */ private setContentSecurityPolicy; /** * Set HTTP Strict Transport Security header */ private setHsts; /** * Set additional security headers */ private setAdditionalSecurityHeaders; /** * Get list of enabled headers */ private getEnabledHeaders; /** * Get headers that were applied to response */ private getAppliedHeaders; /** * Update CSP policy */ updateContentSecurityPolicy(policy: string): void; /** * Update HSTS configuration */ updateHsts(maxAge: number, includeSubDomains?: boolean, preload?: boolean): void; /** * Enable or disable specific header */ toggleHeader(headerName: keyof SecurityHeadersConfig, enabled: boolean): void; /** * Get current configuration */ getConfig(): SecurityHeadersConfig | undefined; /** * Get security headers analysis */ getHeadersAnalysis(): { totalHeaders: number; enabledHeaders: string[]; disabledHeaders: string[]; securityScore: number; }; /** * Update configuration */ updateConfig(config: Partial): void; }