> For the complete documentation index, see [llms.txt](https://clients.medianova.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clients.medianova.com/products/performance-cdn/static-content-delivery/advanced-configuration/headers.md).

# Headers

Configure how Medianova CDN manages HTTP request and response headers for your CDN Resource.

Header settings control how CDN Resources process, modify, and forward HTTP headers between clients, the CDN, and origin servers. These settings can be used to manage cross-origin requests, configure custom headers, control origin host information, and apply HTTP security policies.

Header configuration is managed per CDN Resource in the [Medianova Control Panel](https://cloud.medianova.com/).

#### Header Configuration

The **Headers** section includes settings for controlling different aspects of HTTP header behavior, including:

* [**CORS Header**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/cors-header.md) – Configure Cross-Origin Resource Sharing (CORS) headers to control cross-origin access to CDN-delivered resources.
* [**Custom Header**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/custom-header.md) – Add or modify custom HTTP headers for requests and responses.
* [**X-CDN Header**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/x-cdn-header.md) – Configure the X-CDN response header to identify content delivered through Medianova CDN.
* [**Google Tag Gateway**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/google-tag-gateway.md) – Configure routing for supported Google tag and measurement requests through your website domain.
* [**Origin Host Header**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/origin-host-header.md) – Define the Host header sent by the CDN when forwarding requests to the origin server.
* [**HTTP Strict Transport (HSTS) Protection**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/http-strict-transport-hsts-protection.md) – Configure the Strict-Transport-Security response header to instruct browsers to use HTTPS.
* [**X-Frame Options**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/x-frame-options.md) – Configure the X-Frame-Options response header to control whether browsers can display content within frames.
* [**X-XSS Protection**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/x-xss-protection.md) – Configure the X-XSS-Protection response header for legacy browser XSS filtering behavior.
* [**X-Content Type Options**](/products/performance-cdn/static-content-delivery/advanced-configuration/headers/x-content-type-options.md) – Configure the X-Content-Type-Options response header to prevent MIME type sniffing.

Select the relevant header feature in the documentation for its configuration options and behavior.

{% hint style="info" %}
Header settings can affect cross-origin access, origin request handling, browser security policies, and application compatibility. Configure each setting according to your application's HTTP requirements.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://clients.medianova.com/products/performance-cdn/static-content-delivery/advanced-configuration/headers.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.