Headers

CORS Header

This setting is available in small, large, VOD and streaming resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_cors_header*enum

Enable or disable CORS headers.

Example: "on"

onoff

cors_domainsarray of string (uri)

List of domains for CORS.

Response

200

Successfully updated the CORS header settings for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_cors_header": "on",
      "cors_domains": [
        "domain1.com",
        "domain2.com"
      ]
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

Custom Headers

This setting is available for all resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_custom_headers*boolean

Enable or disable custom headers for the resource.

Example: true

custom_headers*array of object

List of custom headers to set for the resource.

Response

200

Successfully updated custom headers for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_custom_headers": true,
      "custom_headers": [
        {
          "type": "request_header",
          "key": "Key1",
          "value": "Value1"
        },
        {
          "type": "add_header",
          "key": "Key2",
          "value": "Value2"
        },
        {
          "type": "hide_header",
          "key": "Key3"
        }
      ]
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

X-CDN Header

This setting is available for all resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_x_cdn_header*boolean

Enable or disable the X-CDN header for the resource.

Example: true

x_cdn_header*string

The name of the X-CDN header.

Example: "test.header"

Response

200

Successfully updated X-CDN header for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_x_cdn_header": true,
      "x_cdn_header": "test.header"
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

Origin Host Header

This setting is available for all resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

origin_host_header*object

Response

200

Successfully updated Origin Host Header for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "origin_host_header": {
        "status": true,
        "header": "domain.example.com"
      }
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

HTTP Strict Transport Security (HSTS) Protection

This setting is available in small, large and dynamic(aksela) resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_hsts_protection*boolean

Enable or disable HTTP Strict Transport Security (HSTS) protection for the resource.

Example: true

max_age_time*string

Maximum time in seconds for which the HSTS protection is applied.

Example: "7776000"

include_sub_domains*boolean

Whether to include subdomains for the HSTS protection.

Example: true

preload*boolean

Whether to include the resource in the preload list for HSTS.

Example: true

Response

200

Successfully updated HSTS protection settings for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_hsts_protection": true,
      "max_age_time": "7776000",
      "include_sub_domains": true,
      "preload": true
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

X-Frame Options

This setting is available in small, large and dynamic(aksela) resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_x_frame*boolean

Enable or disable X-Frame Options for the resource.

Example: true

trusted_domains*array of string

Trusted domains for X-Frame Options.

Response

200

Successfully updated X-Frame Options settings for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_x_frame": true,
      "trusted_domains": [
        "domain1.com",
        "domain2.com",
        "domain3.com"
      ]
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

X-XSS Protection

This setting is available in small, large and dynamic(aksela) resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_x_xss_protection*boolean

Enable or disable X-XSS Protection for the resource.

Example: true

Response

200

Successfully updated X-XSS Protection settings for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_x_xss_protection": true
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}

X-Content Type Options

This setting is available in small, large and dynamic(aksela) resource types.

PUThttps://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}

Path parameters

organization_uuid*string

UUID of the organization

resource_uuid*string

UUID of the resource

Body

application/json

status_x_content_type*boolean

Enable or disable X-Content Type Options for the resource.

Example: true

Response

200

Successfully updated X-Content Type Options settings for the resource.

Body

application/json

statusboolean

Status of the update operation.

Example: true

dataobject

Details of the updated resource.

Request

JavaScriptCurlPython

const response = await fetch('https://cloud.medianova.com/api/v1/cdn/{organization_uuid}/resource/{resource_uuid}', {
    method: 'PUT',
    headers: {
      "Content-Type": "application/json"
    },
    body: JSON.stringify({
      "status_x_content_type": true
    }),
});
const data = await response.json();

Response

200

{
  "status": true,
  "data": {}
}