github/secure_headers

Health v2 · maintenance only

Adoption not part of the score

3228 stars · 254 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A Ruby gem that manages the application of HTTP security response headers such as Content Security Policy, HSTS, and X-Frame-Options with safe defaults. It provides global configuration, per-request overrides, and Rack middleware integration for Rails and Sinatra applications.

Use cases

• add security headers to a rails app
• set up content security policy to prevent xss
• enforce https with hsts
• prevent clickjacking with x-frame-options
• mark cookies as secure httponly and samesite
• configure referrer-policy headers
• apply security headers in sinatra

When to choose

• you run a Ruby web application and want secure default headers with minimal effort
• you need fine-grained CSP configuration with named and per-action overrides
• you want a battle-tested library maintained by GitHub

When to avoid

• your stack is not Ruby or Rack-based
• you manage headers at the reverse proxy or CDN layer instead of the app
• you need a general web application firewall rather than header management

Facets

library · maturity stable

middleware security security web-development backend ruby security-headers content-security-policy hsts rack-middleware clickjacking-protection xss-protection web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="github/secure_headers")