Response headers allow a server to send additional information with a response. HTTP response headers can be used for many purposes. E.g. to tell how long a result may be cached, which server the request handled, or what kind of data is returned. The HTTP Headers add-on focuses on security headers.
The following response headers can be configured:
HTTP Headers is an add-on for advanced users. It can be used by beginners, but it is expected the user is familiar with HTTP headers and how they should be configured.
Once HTTP Headers is installed, you can also inspect the response headers via the dashboard Test page. You'd also run a scan via https://securityheaders.com, or run a cURL command, e.g. with curl -I https://www.example.com (the -I makes sure only the headers are shown).
- PHP 5.6+
- concrete5 8.3.1+