Added security headers middleware. (#48)

samples/ExampleService/ExampleServiceModule.cs

@@ -43,6 +43,8 @@ public override void Configure(IApplicationInitializationContext context)
 
 			context.UseHttpsRedirection();
 
+			context.UseSecurityHeaders();
+
 			context.UseRouting();
 
 			context.UseEndpoints();

src/Fluxera.Extensions.Hosting.Modules.AspNetCore/ApplicationInitializationContextExtensions.cs

@@ -3,6 +3,7 @@
 	using System.Collections.Generic;
 	using System.Linq;
 	using Fluxera.Extensions.DependencyInjection;
+	using global::AspNetCore.SecurityHeaders;
 	using JetBrains.Annotations;
 	using Microsoft.AspNetCore.Builder;
 	using Microsoft.AspNetCore.Http;
@@ -25,6 +26,17 @@ public static IApplicationInitializationContext UseHsts(this IApplicationInitial
 			return context;
 		}
 
+		/// <summary>
+		///     Adds middleware for writing security response headers.
+		/// </summary>
+		public static IApplicationInitializationContext UseSecurityHeaders(this IApplicationInitializationContext context)
+		{
+			WebApplication app = context.GetApplicationBuilder();
+			context.Log("UseSecurityHeaders", _ => app.UseSecurityHeaders());
+
+			return context;
+		}
+
 		/// <summary>
 		///     Adds middleware for redirecting HTTP Requests to HTTPS.
 		/// </summary>

src/Fluxera.Extensions.Hosting.Modules.AspNetCore/AspNetCoreModule.cs

@@ -9,6 +9,7 @@
 	using Fluxera.Spatial.SystemTextJson;
 	using Fluxera.StronglyTypedId.SystemTextJson;
 	using Fluxera.ValueObject.SystemTextJson;
+	using global::AspNetCore.SecurityHeaders;
 	using JetBrains.Annotations;
 	using Microsoft.AspNetCore.Builder;
 	using Microsoft.Extensions.DependencyInjection;
@@ -88,6 +89,12 @@ public override void ConfigureServices(IServiceConfigurationContext context)
 				}));
 			}
 
+			// Add the Security Headers options.
+			if(!context.Environment.IsDevelopment())
+			{
+				context.Log("AddSecurityHeaders", services => services.AddSecurityHeaders());
+			}
+
 			// Configure the mvc builder.
 			MvcBuilderContainer container = context.Services.GetObject<MvcBuilderContainer>();
 			MvcBuilderContributorList contributorList = context.Services.GetObject<MvcBuilderContributorList>();

src/Fluxera.Extensions.Hosting.Modules.AspNetCore/Fluxera.Extensions.Hosting.Modules.AspNetCore.csproj

@@ -38,6 +38,7 @@
 			<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
 		</PackageReference>
 		<PackageReference Include="JetBrains.Annotations" Version="2022.1.0" />
+		<PackageReference Include="MadEyeMatt.AspNetCore.SecurityHeaders" Version="6.0.0" />
 		<PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.0.0-rc9.7" />
 	</ItemGroup>