Server Headers
You may want to set up extra server headers for security purposes. The headers are returned when a client requests your docs site.
How to set up Server Headers?
To set up server headers:
From the sidebar, click on Project Settings
. Under Hosting, click on Edit Headers
. Add the server headers as follows:
- Each header must be on one line.
- Each header must have the header name and value separated by
:
. - You cannot modify certain headers, such as
Cache-Control
orServer
. - Any invalid header will be removed.
Hit Save.
It may take up to 5 minutes for changes to take effect.
Example Security Headers
These are some security headers that you may want to apply.
Make sure you fully understand what each header is. Using headers incorrectly could cause your entire custom domain to be irreversibly broken. We are not liable for any damages due to misconfiguration.
Strict-Transport-Security max-age=31536000
X-Frame-Options DENY
Referrer-Policy no-referrer
Anything missing? Leave us feedback