import type http from "node:http";
export interface HttpSecurityHeaderOptions {
    scriptNonce?: string;
}
export declare function buildContentSecurityPolicy(options?: HttpSecurityHeaderOptions): string;
export declare const HTTP_SECURITY_HEADERS: Readonly<{
    "Content-Security-Policy": string;
    "Strict-Transport-Security": "max-age=31536000; includeSubDomains";
    "X-Content-Type-Options": "nosniff";
    "X-Frame-Options": "DENY";
    "Referrer-Policy": "strict-origin-when-cross-origin";
    "Permissions-Policy": "camera=(), microphone=(), geolocation=()";
    "Cross-Origin-Opener-Policy": "same-origin";
}>;
export declare function applyHttpSecurityHeaders(res: http.ServerResponse, options?: HttpSecurityHeaderOptions): void;
//# sourceMappingURL=http-security.d.ts.map