Available for: Business Plus plan (Legacy: Business plan and above)
What are Custom Headers?
Custom headers are a feature that allows you to add supported headers based on your website's needs.
This feature is available with the Business Plus plan and adds an extra layer of security to your published site, helping prevent cross-site scripting attacks, iframe embedding, and other domain-level security issues.
Note: Due to the advanced nature of this feature, our chat support cannot provide assistance beyond what is covered in this article.
For Legacy Plan Users
For Legacy Plan Users
Legacy Business plan users can access this feature by adding it as a project addon.
Pricing and Payment
Custom headers are available as a separate contract in addition to your plan. The fee is $140 per month, billed monthly. For details on the payment cycle, refer to Add-on Overview.
Setting Up Custom Header Addon
Tips: Only owners and above can confirm payment and add/configure headers.
1. Open [Plan & Billing] in Dashboard
Open [Plan & Billing] for the project where you want to add custom headers.
2. Add Custom Headers Addon
Click [Get add-on] for the custom header.
On the payment confirmation screen, review the add-on billing amount and notes, then click [Buy now].
For further setup instructions, see the configuration steps below.
How to Disable the Custom Headers Add-on
Tip: Ongoing settings will be deleted once the add-on contract ends.
1. Open [Plans & Billing] on the Dashboard
Open [Plans & Billing] for the project where you want to stop using the custom headers add-on.
2. Disable the Custom Headers Add-on
Click [Disable add-on] for the custom headers, review the confirmation screen, and then click [Disable add-on].
Supported Header Types
Studio currently supports the following headers, with up to 10 custom headers allowed:
x-xss-protection
x-content-type-options
x-frame-options
referrer-policy
x-permitted-cross-domain-policies
timing-allow-origin
content-security-policy
feature-policy
expect-ct
strict-transport-security
For details, syntax, and browser compatibility of these headers, refer to HTTP Headers - HTTP | MDN Web Docs.
How to Set Up Custom Headers
Tips: Only owners and above can confirm add/configure headers.
Note: If your site is live, changes will be reflected immediately upon addition.
1. Configure the Custom Headers
Open the project [Project settings] and click [Add Header] for custom headers.
2. Configure Headers
From [KEY], select the header you want to add. Enter the required information in [VALUE], and click [Save].
How to Delete Custom Headers
1. Open [Project Settings] in Dashboard
Open the dashboard for the project with custom headers and click [Project Settings] from the left menu.
2. Click the Delete Button
Click [×] on the custom header you want to delete. Review the deletion details and click [Delete].
