Adding response headers (add_header) in Nginx - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the add_header directive do in nginx?

It adds custom HTTP response headers to the responses sent by the nginx server to clients.

beginner

How do you add a header named X-Frame-Options with value DENY in nginx?

Use the directive: <br>add_header X-Frame-Options "DENY";

intermediate

Where in the nginx configuration file can you place the add_header directive?

You can place it inside http, server, or location blocks depending on the scope you want the header to apply.

intermediate

What happens if you use add_header inside a location block that overrides a header set in server block?

The header set in the location block will override or add to the headers from the server block for requests matching that location.

beginner

Why might you want to add security headers like Content-Security-Policy using add_header?

To improve security by controlling what resources the browser can load, preventing attacks like cross-site scripting (XSS).

Which nginx directive is used to add a custom response header?

A add_header

B set_header

C header_add

D response_header

The correct directive to add response headers in nginx is add_header.

Where can the add_header directive be placed in nginx config?

A Only inside <code>server</code> block

B Only inside <code>http</code> block

C Inside <code>http</code>, <code>server</code>, or <code>location</code> blocks

D Only inside <code>location</code> block

The add_header directive can be used inside http, server, or location blocks.

What is the effect of adding add_header X-Frame-Options "DENY";?

A Allows the page to be framed by any site

B Redirects the page to another URL

C Enables caching of the page

D Prevents the page from being displayed in a frame or iframe

The header X-Frame-Options: DENY prevents the page from being displayed inside frames or iframes.

If you want to add a header only for a specific URL path, where should you put the add_header directive?

A Inside <code>location</code> block for that path

B Inside <code>server</code> block

C In a separate config file

D Inside <code>http</code> block

To add a header only for a specific URL path, place add_header inside the matching location block.

What must you do after changing nginx config to apply new headers?

A Nothing, changes apply automatically

B Restart or reload nginx

C Clear browser cache

D Reinstall nginx

You must reload or restart nginx to apply configuration changes including new headers.

Explain how to add a custom HTTP response header in nginx and where you can place the directive.

Think about the scope of configuration blocks and the directive syntax.

Describe why adding security headers with add_header is important and give an example.

Consider how browsers use headers to control page behavior.