Set security headers

Updated September 30, 2024 19:50

If you want to increase the security of your Optimizely Configured Commerce site, you can use the Content-Security-Policy header.

You must have the role of ISC_System or ISC_Implementer to edit this option.

You can find this setting under Administration > Settings > Site Configurations > Security Headers in the Admin Console. Content-Security-Policy acts as an added layer of security to prevent cross-site scripting (XSS).

Talk to your partner or developer before implementing this setting as it could break your website.

Security Headers.png

See Mozilla's Content Security Policy article for information.

Set security headers

<%= previousTitle %>

<%= nextTitle %>

In this article

<%= heading %>

<% if (!block.description) { %> <%= block.name %> <% } else { %> <%= block.name %> <% } %>

<%= heading %>

<% if (!block.description) { %> <%= block.name %> <% } else { %> <%= block.name %> <% } %>

User Research

Security Announcements

Still have questions?

Categories

Toggle navigation menu

<%= category.name %>