How does Astro HTTP apply headers?
Headers are applied using Astro middleware based on a single configuration file loaded at startup.
Astro & HTTP
Astro HTTP Plugin FAQs
Clear answers explaining Astro HTTP’s fail-closed header model and configuration system.
Questions covered
Answers
Are any headers enabled by default?
No. Only headers explicitly enabled in the configuration file are sent.
Does Astro HTTP mutate headers after load?
No. Configuration values are deep-frozen and cannot be mutated at runtime.
What happens if configuration loading fails?
Astro HTTP fails closed. No headers are applied if safe loading cannot be guaranteed.
Can I define custom headers?
Yes. Custom headers are sent verbatim without validation or transformation.
Are cross-origin headers enabled by default?
No. Cross-origin headers are disabled by default and must be explicitly enabled.
Does Astro HTTP add runtime JavaScript?
No. Astro HTTP operates entirely at build and middleware level.
Which Astro versions are supported?
Astro HTTP supports Astro v4 and v5.
Is Astro HTTP open source?
Yes. Astro HTTP is released under the MIT license.
Want to try it yourself? Astro HTTP plugin or Astro Security plugin or Astro Canonical plugin
Ready to take full control of your HTTP headers?