Enable modern web security headers to all responses

Go from an F to an A grade on securityheaders.io by adding security policy headers to your responses at the edge.

VCL

Use this solution in your VCL service (click RUN below to test this solution or clone it to make changes):

Compute

Use this solution in your Compute service:

  1. Go
  2. JavaScript
  3. Rust

User contributed notes

BETA

Do you see an error in this page? Do have an interesting use case, example or edge case people should know about? Share your knowledge and help people who are reading this page! (Comments are moderated; for support, please contact support@fastly.com)