I've been trying to skill up in terms of using Rust for developing web services, and it occurred to me that there weren't any crates available for conveniently adding OWASP's best-practice HTTP headers to outgoing responses by default
So, today, I published 2x new MIT-licensed crates: owasp-headers and tower-default-headers
They may be used separately, but you can also combine them if you want to include OWASP's set of headers in the default set of headers for your HTTP server
I'm still fairly new to web services and Futures in Rust, so I'm sure there's room for improvement
Give these crates a spin and let me know how you go :)