A Cloudflare Worker to enable Security Headers on your site.
For a long time it's been difficult to set Security Headers when you use certain hosted solutions like Ghost Pro or GitHub Pages. All of that is about to change and you can now quickly and easily deploy any security header of your choosing.
For details on how to use this Cloudflare Worker please visit the blog post here: https://scotthelme.co.uk/security-headers-cloudflare-worker
Since this worker was written Cloudflare have released HTTP Response Header Modification Rules . Using a Transform Rule instead of a Worker has several advantages over using a Worker, including reduced cost (Transform Rules are free), and you don't have to deal with trying to run multiple workers on the same route.
Perhaps the docs on this worker could be updated to point users at the Transform Rule option.
All status 1xx requests (informational requests) fail as:
Responses may only be constructed with status codes in the range 200 to 599, inclusive.
This error is triggered by constructing the new Response with the out of range status code.
Hi Scott,
I have an issue when I turn on the worker my "Traffic Served Over SSL" under Analytics tab start deceasing down to 50 %. When I disable the worker, it reach 99 % again. Any idea how to fix it? Thanks
The Mozilla Observatory suggests my site is not doing CSP properly. Is this a false positive? it's a bit outside of my expertise sorry,
This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
