6 replies

_headers with SvelteKit not applied?

heya, on my SvelteKit site using the

cloudflare-pages

cloudflare-pages

adapter, I have a

_headers

_headers

file with this content and these show in the Headers tab of my CF deployment but the headers don't show in my network tab requests, any idea why?

/*
  X-Content-Type-Options: nosniff
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: no-referrer-when-downgrade
  Permissions-Policy: document-domain=()
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  Feature-Policy: geolocation 'self'
  Content-Security-Policy: default-src 'self'; [...and more stuff];

/:all*(woff2?|jpe?g|png|gif|svg|js|xml|txt|json|css|mp4|webm|avif)
  Cache-Control: public, max-age=31536000, immutable

/*
  X-Content-Type-Options: nosniff
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: no-referrer-when-downgrade
  Permissions-Policy: document-domain=()
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  Feature-Policy: geolocation 'self'
  Content-Security-Policy: default-src 'self'; [...and more stuff];

/:all*(woff2?|jpe?g|png|gif|svg|js|xml|txt|json|css|mp4|webm|avif)
  Cache-Control: public, max-age=31536000, immutable

Cloudflare Developers•10mo ago•

6 replies

flayks

_headers with SvelteKit not applied?

heya, on my SvelteKit site using the

cloudflare-pages

cloudflare-pages

adapter, I have a

_headers

_headers

file with this content and these show in the Headers tab of my CF deployment but the headers don't show in my network tab requests, any idea why?

/*
  X-Content-Type-Options: nosniff
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: no-referrer-when-downgrade
  Permissions-Policy: document-domain=()
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  Feature-Policy: geolocation 'self'
  Content-Security-Policy: default-src 'self'; [...and more stuff];

/:all*(woff2?|jpe?g|png|gif|svg|js|xml|txt|json|css|mp4|webm|avif)
  Cache-Control: public, max-age=31536000, immutable

/*
  X-Content-Type-Options: nosniff
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  Referrer-Policy: no-referrer-when-downgrade
  Permissions-Policy: document-domain=()
  Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
  Feature-Policy: geolocation 'self'
  Content-Security-Policy: default-src 'self'; [...and more stuff];

/:all*(woff2?|jpe?g|png|gif|svg|js|xml|txt|json|css|mp4|webm|avif)
  Cache-Control: public, max-age=31536000, immutable

_headers with SvelteKit not applied?

Similar Threads

_headers with SvelteKit not applied?

Similar Threads

Similar Threads

Similar Threads