Adding response headers (add_header) in Nginx - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to add a custom header named X-Custom-Header with value MyValue.

Nginx

add_header [1] MyValue;

Drag options to blanks, or click blank then click option'

AHeader-Value

BX-Header

CCustom-Header

DX-Custom-Header

Attempts:

3 left

💡 Hint

Common Mistakes

Using a wrong or incomplete header name.

Forgetting to add the header name before the value.

The add_header directive requires the exact header name. Here, X-Custom-Header is the correct header name to add.

2fill in blank

medium

Complete the code to add a header named Cache-Control with value no-cache.

Nginx

add_header [1] no-cache;

Drag options to blanks, or click blank then click option'

ANo-Cache

BCache

CCache-Control

DControl-Cache

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect header names like 'Cache' or 'No-Cache'.

Misspelling the header name.

The standard header to control caching is Cache-Control. It must be written exactly as shown.

3fill in blank

hard

Fix the error in the code to correctly add the header Strict-Transport-Security with value max-age=31536000.

Nginx

add_header [1] max-age=31536000;

Drag options to blanks, or click blank then click option'

AStrict-Transport-Security

BStrictTransportSecurity

CStrict_Transport_Security

DStrict Transport Security

Attempts:

3 left

💡 Hint

Common Mistakes

Using underscores or spaces instead of hyphens.

Omitting hyphens in the header name.

The correct header name is Strict-Transport-Security with hyphens. Other forms are invalid and cause errors.

4fill in blank

hard

Fill both blanks to add a header named X-Frame-Options with value SAMEORIGIN.

Nginx

add_header [1] [2];

Drag options to blanks, or click blank then click option'

AX-Frame-Options

BSAMEORIGIN

CDENY

DALLOW-FROM

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect header names or values.

Mixing up the order of header name and value.

The header X-Frame-Options controls if the page can be framed. The value SAMEORIGIN allows framing only from the same site.

5fill in blank

hard

Fill all three blanks to add a header named Content-Security-Policy with value default-src 'self'; script-src 'none'.

Nginx

add_header [1] "[2] [3]";

Drag options to blanks, or click blank then click option'

AContent-Security-Policy

Bdefault-src

C'self'; script-src 'none';

Dscript-src

Attempts:

3 left

💡 Hint

Common Mistakes

Not quoting the header value.

Using incomplete or incorrect directives.

Misplacing semicolons or quotes.

The Content-Security-Policy header controls allowed content sources. The value must be quoted and include directives like default-src 'self'; script-src 'none';.