You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
content: Content Security Policies (CSPs) and Cloudflare
7
-
8
7
---
9
8
10
9
A **Content Security Policy (CSP)** is an added layer of security that helps detect and mitigate certain types of attacks, including:
11
10
12
-
* Content/code injection
13
-
* Cross-site scripting (XSS)
14
-
* Embedding malicious resources
15
-
* Malicious iframes (clickjacking)
11
+
- Content/code injection
12
+
- Cross-site scripting (XSS)
13
+
- Embedding malicious resources
14
+
- Malicious iframes (clickjacking)
16
15
17
16
To learn more about configuring a CSP in general, refer to the [Mozilla documentation](https://developer.mozilla.org/docs/web/http/csp).
18
17
@@ -22,15 +21,15 @@ Cloudflare’s [CDN](/cache/) is compatible with CSP.
22
21
23
22
Cloudflare does not:
24
23
25
-
* Modify CSP headers from the origin web server (except when using Zaraz, to ensure the [Zaraz script is always running](https://blog.cloudflare.com/cloudflare-zaraz-supports-csp/)).
26
-
* Require changes to acceptable sources for first or third-party content.
27
-
* Modify URLs (besides adding the [`/cdn-cgi/` endpoint](/fundamentals/reference/cdn-cgi-endpoint/) and [Cloudflare Fonts](/speed/optimization/content/fonts/#cloudflare-fonts) that rewrites Google Fonts urls).
28
-
* Interfere with locations specified in your CSP.
24
+
- Modify CSP headers from the origin web server (except when using Zaraz, to ensure the [Zaraz script is always running](https://blog.cloudflare.com/cloudflare-zaraz-supports-csp/)).
25
+
- Require changes to acceptable sources for first or third-party content.
26
+
- Modify URLs (besides adding the [`/cdn-cgi/` endpoint](/fundamentals/reference/cdn-cgi-endpoint/) and [Cloudflare Fonts](/speed/optimization/content/fonts/) that rewrites Google Fonts urls).
27
+
- Interfere with locations specified in your CSP.
29
28
30
29
If you require the CSP headers to be changed or added, you can change them using some Cloudflare products:
31
30
32
-
* If your website is [proxied](/dns/manage-dns-records/reference/proxied-dns-records/) through Cloudflare, you can use a [Response Header Modification rule](/rules/transform/response-header-modification/) to modify or add CSP headers.
33
-
* If your website is hosted using [Cloudflare Pages](/pages/), you can set a [`_headers file`](/pages/configuration/headers/) to modify or add CSP headers.
31
+
- If your website is [proxied](/dns/manage-dns-records/reference/proxied-dns-records/) through Cloudflare, you can use a [Response Header Modification rule](/rules/transform/response-header-modification/) to modify or add CSP headers.
32
+
- If your website is hosted using [Cloudflare Pages](/pages/), you can set a [`_headers file`](/pages/configuration/headers/) to modify or add CSP headers.
Copy file name to clipboardExpand all lines: src/content/docs/pages/configuration/monorepos.mdx
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -38,5 +38,5 @@ While Pages does not provide specialized tooling for dependency management in mo
38
38
39
39
## Limitations
40
40
41
-
- You must be using [Build System V2](/pages/configuration/build-image/#v2-build-system/) or later in order for monorepo support to be enabled.
41
+
- You must be using [Build System V2](/pages/configuration/build-image/#v2-build-system) or later in order for monorepo support to be enabled.
42
42
- You can configure a maximum of 5 Pages projects per repository. If you need this limit raised, contact your Cloudflare account team or use the [Limit Increase Request Form](https://docs.google.com/forms/d/e/1FAIpQLSd_fwAVOboH9SlutMonzbhCxuuuOmiU1L_I5O2CFbXf_XXMRg/viewform).
0 commit comments