https://blog.plzhans.com/en/tags/browser/Recent content in Browser on plzhans blogHugoenThu, 03 Sep 2026 11:08:00 +0000https://blog.plzhans.com/en/posts/120-cloudflare-security-headers-hsts-csp/Sun, 30 Aug 2026 01:25:00 +0000https://blog.plzhans.com/en/posts/120-cloudflare-security-headers-hsts-csp/<p><picture> <source srcset="https://blog.plzhans.com/posts/120-cloudflare-security-headers-hsts-csp/assets/1_bb515481-7252-4c3f-94cb-0474c42c9d1c_hu_b1596e5cf95128e.webp" type="image/webp"> <img src="https://blog.plzhans.com/posts/120-cloudflare-security-headers-hsts-csp/assets/1_bb515481-7252-4c3f-94cb-0474c42c9d1c_hu_78a6ae4905cadc2c.png" alt="Representative image showing a setup that splits security headers between Cloudflare and an HTML meta tag" width="1200" height="630" loading="lazy"> </picture></p> <p><img src="https://blog.plzhans.com/posts/120-cloudflare-security-headers-hsts-csp/assets/2_3cb22a0f-7e83-805e-96d1-eef71485d603.png" alt="Representative image showing a setup that splits security headers between Cloudflare and an HTML meta tag" loading="lazy"></p> <h2 id="overview">Overview</h2> <p>SEO audit reports sometimes flag four security headers: <code>Strict-Transport-Security</code>, <code>Content-Security-Policy</code>, <code>X-Content-Type-Options</code>, and <code>Referrer-Policy</code>.</p> <p>At first glance it&rsquo;s odd to see these under &ldquo;SEO.&rdquo; Short answer up front: <strong>these headers don&rsquo;t directly boost your search ranking.</strong></p> <p>This post covers why security headers show up in SEO audits, what each header actually does, and how to apply them on a static blog sitting behind Cloudflare in a combination that&rsquo;s <strong>easy to maintain later</strong>.</p>