headers

Build a Content-Security-Policy header as the exact config snippet for Nginx, Apache, Express, or Next.js.

Build a CORS configuration as real syntax for Express, Next.js, Nginx, Apache, or Spring Boot.

Generate raw HTTP security header lines: HSTS, X-Frame-Options, Permissions-Policy rows, and COOP/COEP.

Build a Cloudflare Pages _headers file from repeatable path-pattern and header rows.

Generate a Cloudflare Pages _headers snippet with HSTS, CSP, Referrer-Policy, and more, with sensible defaults.