domains / families / software-engineering / manage-headers

manage-headers

separate

Inspects and configures the security headers a Power Pages site sends to browsers — Content Security Policy, frame and clickjacking protection, cross-origin sharing, cookie behavior, and related site settings. Identifies gaps and walks the user through fixes. Use when the user wants to review headers, fix CSP errors, allow embedding in another site, control cross-origin access, harden cookie settings, or asks "are my browser settings safe?", "fix my CSP", "set up CORS" — even if they only mention a specific header name without saying "security headers".

When to use

• review headers
• fix CSP errors
• allow embedding in another site
• control cross-origin access
• harden cookie settings
• set up CORS
• configure security headers

When not to use

• set HTTP/Strict-Transport-Security
• verify headers in Power Pages Studio preview

Skill page

Source