pub fn apply_security_headers(headers: &mut HeaderMap, sh: &SecurityHeaders)Expand description
Stamp a route’s security-header policy onto a response (DW-028).
Every present field REPLACES any upstream-sent value: the gateway
is the source of truth for its edge policy (the same rule as the
deprecation and X-RateLimit-* headers). Values are static or
validation-checked representable; the if let Ok skips are the
same generation-tear backstop posture as everywhere in the tail.