From 2616a25b9607fa284f370603487f2bc5345398e4 Mon Sep 17 00:00:00 2001 From: Chris Martinelli <56095825+chris-martinelli@users.noreply.github.com> Date: Mon, 21 Oct 2024 14:26:00 -0500 Subject: [PATCH] Update content-security-policies.mdx Rules can't modify CSP header, only add/replace or remove --- .../policies-compliances/content-security-policies.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/fundamentals/reference/policies-compliances/content-security-policies.mdx b/src/content/docs/fundamentals/reference/policies-compliances/content-security-policies.mdx index 83e6bbb2222424..1666aecc73a22d 100644 --- a/src/content/docs/fundamentals/reference/policies-compliances/content-security-policies.mdx +++ b/src/content/docs/fundamentals/reference/policies-compliances/content-security-policies.mdx @@ -28,7 +28,7 @@ Cloudflare does not: If you require the CSP headers to be changed or added, you can change them using some Cloudflare products: -- If your website is [proxied](/dns/manage-dns-records/reference/proxied-dns-records/) through Cloudflare, you can use a [Response Header Modification rule](/rules/transform/response-header-modification/) to modify or add CSP headers. +- If your website is [proxied](/dns/manage-dns-records/reference/proxied-dns-records/) through Cloudflare, you can use a [Response Header Modification rule](/rules/transform/response-header-modification/) to replace or add CSP headers. - If your website is hosted using [Cloudflare Pages](/pages/), you can set a [`_headers file`](/pages/configuration/headers/) to modify or add CSP headers. ### Product requirements