# Hoa > Web application framework A minimal web framework built on Web Standards. Support for any JavaScript runtime. ## Table of Contents ### API - [app](/api/hoa.md) - [ctx](/api/context.md) - [ctx.req](/api/request.md) - [ctx.res](/api/response.md) ### Adapter - [@hoajs/adapter](/adapter/node.md) ### Middleware - [@hoajs/basic-auth](/middleware/basic-auth.md) - [@hoajs/bodyparser](/middleware/bodyparser.md) - [@hoajs/cache](/middleware/cache.md) - [@hoajs/combine](/middleware/combine.md) - [@hoajs/compress](/middleware/compress.md) - [@hoajs/context-storage](/middleware/context-storage.md) - [@hoajs/cookie](/middleware/cookie.md) - [@hoajs/cors](/middleware/cors.md) - [@hoajs/csrf](/middleware/csrf.md) - [@hoajs/etag](/middleware/etag.md) - [@hoajs/favicon](/middleware/favicon.md) - [@hoajs/ip](/middleware/ip.md) - [@hoajs/json](/middleware/json.md) - [@hoajs/jwt](/middleware/jwt.md) - [@hoajs/language](/middleware/language.md) - [@hoajs/logger](/middleware/logger.md) - [@hoajs/method-override](/middleware/method-override.md) - [@hoajs/request-id](/middleware/request-id.md) - [@hoajs/response-time](/middleware/response-time.md) - [@hoajs/powered-by](/middleware/powered-by.md) - [@hoajs/timeout](/middleware/timeout.md) - [@hoajs/vary](/middleware/vary.md) #### Debug - [@hoajs/sentry](/middleware/debug/sentry.md) #### Rate Limit - [@hoajs/cloudflare-rate-limit](/middleware/ratelimit/cloudflare-rate-limit.md) #### Routing - [@hoajs/router](/middleware/router/router.md) - [@hoajs/tiny-router](/middleware/router/tiny-router.md) #### Secure Headers - [@hoajs/secure-headers](/middleware/secure-headers/secure-headers.md) - [Content-Security-Policy](/middleware/secure-headers/content-security-policy.md) - [Cross-Origin-Embedder-Policy](/middleware/secure-headers/cross-origin-embedder-policy.md) - [Cross-Origin-Opener-Policy](/middleware/secure-headers/cross-origin-opener-policy.md) - [Cross-Origin-Resource-Policy](/middleware/secure-headers/cross-origin-resource-policy.md) - [Origin-Agent-Cluster](/middleware/secure-headers/origin-agent-cluster.md) - [Referrer-Policy](/middleware/secure-headers/referrer-policy.md) - [Strict-Transport-Security](/middleware/secure-headers/strict-transport-security.md) - [X-Content-Type-Options](/middleware/secure-headers/x-content-type-options.md) - [X-DNS-Prefetch-Control](/middleware/secure-headers/x-dns-prefetch-control.md) - [X-Download-Options](/middleware/secure-headers/x-download-options.md) - [X-Frame-Options](/middleware/secure-headers/x-frame-options.md) - [X-Permitted-Cross-Domain-Policies](/middleware/secure-headers/x-permitted-cross-domain-policies.md) - [X-XSS-Protection](/middleware/secure-headers/x-xss-protection.md) - [Permission-Policy](/middleware/secure-headers/permission-policy.md) #### Validator - [@hoajs/nana](/middleware/validator/nana.md) - [@hoajs/zod](/middleware/validator/zod.md) - [@hoajs/valibot](/middleware/validator/valibot.md) #### View Renderer - [@hoajs/mustache](/middleware/view/mustache.md) ### Other - [What is Hoa?](/what-is-hoa.md)