HTTP

HTTP headers

Security headers builder

Pick the headers, then copy the config for your server. Check a site to see what it sends today.

Other headers
Cross-origin isolation

Sources: 'self' 'none' https://cdn.example.com *.example.com data: 'nonce-…' 'strict-dynamic' — keywords keep their single quotes.

Header reference