Headers

CORS Header

put

This setting is available in small, large, VOD and streaming resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_cors_headerstring · enumrequired

Enable or disable CORS headers.

Example: onAvailable options:

cors_domainsstring · uri[]optional

List of domains for CORS.

Example: ["domain1.com","domain2.com"]

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 72

{
  "status_cors_header": "on",
  "cors_domains": [
    "domain1.com",
    "domain2.com"
  ]
}

200

Successfully updated the CORS header settings for the resource.

{
  "status": true,
  "data": {}
}

Custom Headers

put

This setting is available for all resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_custom_headersbooleanrequired

Enable or disable custom headers for the resource.

Example: true

custom_headersobject[]required

List of custom headers to set for the resource.

Example: {"type":"request_header","key":"Key1","value":"Value1"}

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 193

{
  "status_custom_headers": true,
  "custom_headers": [
    {
      "type": "request_header",
      "key": "Key1",
      "value": "Value1"
    },
    {
      "type": "add_header",
      "key": "Key2",
      "value": "Value2"
    },
    {
      "type": "hide_header",
      "key": "Key3"
    }
  ]
}

200

Successfully updated custom headers for the resource.

{
  "status": true,
  "data": {}
}

X-CDN Header

put

This setting is available for all resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_x_cdn_headerbooleanrequired

Enable or disable the X-CDN header for the resource.

Example: true

x_cdn_headerstringrequired

The name of the X-CDN header.

Example: test.header

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 57

{
  "status_x_cdn_header": true,
  "x_cdn_header": "test.header"
}

200

Successfully updated X-CDN header for the resource.

{
  "status": true,
  "data": {}
}

Origin Host Header

put

This setting is available for all resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

origin_host_headerobjectrequired

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 68

{
  "origin_host_header": {
    "status": true,
    "header": "domain.example.com"
  }
}

200

Successfully updated Origin Host Header for the resource.

{
  "status": true,
  "data": {}
}

HTTP Strict Transport Security (HSTS) Protection

put

This setting is available in small, large and dynamic(aksela) resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_hsts_protectionbooleanrequired

Enable or disable HTTP Strict Transport Security (HSTS) protection for the resource.

Example: true

max_age_timestringrequired

Maximum time in seconds for which the HSTS protection is applied.

Example: 7776000

include_sub_domainsbooleanrequired

Whether to include subdomains for the HSTS protection.

Example: true

preloadbooleanrequired

Whether to include the resource in the preload list for HSTS.

Example: true

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 98

{
  "status_hsts_protection": true,
  "max_age_time": "7776000",
  "include_sub_domains": true,
  "preload": true
}

200

Successfully updated HSTS protection settings for the resource.

{
  "status": true,
  "data": {}
}

X-Frame Options

put

This setting is available in small, large and dynamic(aksela) resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_x_framebooleanrequired

Enable or disable X-Frame Options for the resource.

Example: true

trusted_domainsstring[]required

Trusted domains for X-Frame Options.

Example: domain1.com

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 85

{
  "status_x_frame": true,
  "trusted_domains": [
    "domain1.com",
    "domain2.com",
    "domain3.com"
  ]
}

200

Successfully updated X-Frame Options settings for the resource.

{
  "status": true,
  "data": {}
}

X-XSS Protection

put

This setting is available in small, large and dynamic(aksela) resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_x_xss_protectionbooleanrequired

Enable or disable X-XSS Protection for the resource.

Example: true

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 32

{
  "status_x_xss_protection": true
}

200

Successfully updated X-XSS Protection settings for the resource.

{
  "status": true,
  "data": {}
}

X-Content Type Options

put

This setting is available in small, large and dynamic(aksela) resource types.

Path parameters

organization_uuidstringrequired

UUID of the organization

resource_uuidstringrequired

UUID of the resource

Body

status_x_content_typebooleanrequired

Enable or disable X-Content Type Options for the resource.

Example: true

Responses

application/json

objectoptional

put

HTTPcURLJavaScriptPython

PUT /api/v1/cdn/{organization_uuid}/resource/{resource_uuid} HTTP/1.1
Host: cloud.medianova.com
Content-Type: application/json
Accept: */*
Content-Length: 30

{
  "status_x_content_type": true
}

200

Successfully updated X-Content Type Options settings for the resource.

{
  "status": true,
  "data": {}
}