http://jarvis2i2vp4j4tbxjogsnqdemnte5xhzyi7hziiyzxwge3hzmh57zad.onion/notes/security-headers-cloudflare-workers
Simply modify the current headers to your needs, or add new ones to the newHeaders or removeHeaders arrays. let addHeaders = { "Content-Security-Policy" : "default-src 'self'; upgrade-insecure-requests" , "Strict-Transport-Security" : "max-age=1000" , "X-XSS-Protection" : "1; mode=block" , "X-Frame-Options" : "SAMEORIGIN" , "X-Content-Type-Options" : "nosniff" , "Referrer-Policy" : "same-origin" , }; let removeHeaders = [ "Server" , "Public-Key-Pins" , "X-Powered-By" , "X-AspNet-Version" ];...