Custom Request Headers

Overview

The Custom Request Headers setting on a domain stores HTTP header name and value pairs.

Do not use this to allowlist cside

If your origin only answers requests carrying a specific header, cside cannot fetch your script content at all, because the header never arrives. In the dashboard that shows up as “This script does not have a hash. Please view later.” on the affected scripts, along with the loss of content-change detection for them.

There is no self-serve way to identify cside’s requests to your origin today:

• cside does not publish fixed IP ranges for script fetches
• there is no cside user-agent to match on, because the fetch carries the visiting browser’s own user-agent

If you need cside to reach an origin behind a WAF, firewall, or IP allowlist, contact support@cside.dev rather than configuring headers here.

Configuring headers

Navigate to Team Settings > General in the cside dashboard and scroll to the Custom Request Headers section. They apply to every domain on the team.

1. Enter the header name in the Header name field (e.g. X-Request-Id)
2. Enter the header value in the Value field (e.g. my-value)
3. To add additional headers, click + Add header
4. Click Save request headers

To remove a header, click the remove button next to the header row, then click Save request headers.

Permissions

Managing custom request headers requires permission to manage team settings. Contact your team administrator if you don’t have access to this setting.