Custom Request Headers

Overview

Custom Request Headers in Team Settings > General stores header name and value pairs for the team’s domains.

Do not use this to allowlist cside

If your origin only answers requests carrying a specific header, cside cannot fetch your script content at all, because the header never arrives. In the dashboard that shows up as “This script does not have a hash. Please view later.” on the affected scripts, along with the loss of content-change detection for them.

There is no self-serve way to identify cside’s requests to your origin today:

• cside does not publish fixed IP ranges for script fetches
• there is no cside user-agent to match on, because the fetch carries the visiting browser’s own user-agent

If you need cside to reach an origin behind a WAF, firewall, or IP allowlist, contact support@cside.dev rather than configuring headers here.

Configuring headers

In the cside dashboard, click the Settings gear button in the sidebar footer, open the General tab, and scroll to the Custom Request Headers section. They apply to every domain on the team.

1. Enter the header name in the Header name field (e.g. X-Request-Id)
2. Enter the header value in the Value field (e.g. my-value)
3. To add additional headers, click + Add header
4. Click Save request headers

To remove a header, click the remove button next to the header row, then click Save request headers.

Permissions

Changing these settings requires Manage Team permission. Contact your team administrator if the controls are disabled.