Change Security Header (HSTS) setting

PATCH

https://api.cloudflare.com/client/v4/zones/{zone_identifier}/settings/security_header

Last modified:2022-12-16 13:48:36

Cloudflare security header for a zone.

Request

Path Params

zone_identifier

string

required

Body Params application/json

value

object (security_header_value)

required

strict_transport_security

object

optional

Strict Transport Security.

Example

{
    "value": {
        "strict_transport_security": {
            "enabled": true,
            "include_subdomains": true,
            "max_age": 86400,
            "nosniff": true
        }
    }
}

Request samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request PATCH 'https://api.cloudflare.com/client/v4/zones//settings/security_header' \
--header 'Content-Type: application/json' \
--data-raw '{
    "value": {
        "strict_transport_security": {
            "enabled": true,
            "include_subdomains": true,
            "max_age": 86400,
            "nosniff": true
        }
    }
}'

Responses

🟢200Change Security Header (HSTS) setting response

application/json

Body

allOf {2}

optional

allOf {2}

optional

object (api-response-single)

optional

object

optional

object

optional

result

object (Security Header)

optional

Cloudflare security header for a zone.

Example

{
    "errors": [],
    "messages": [],
    "result": {
        "editable": true,
        "id": "security_header",
        "modified_on": "2014-01-01T05:20:00.12345Z",
        "value": {
            "strict_transport_security": {
                "enabled": true,
                "include_subdomains": true,
                "max_age": 86400,
                "nosniff": true
            }
        }
    },
    "success": true
}

🟢200Change Security Header (HSTS) setting response failure

Modified at 2022-12-16 13:48:36

Get Security Header (HSTS) setting

Get Security Level setting