How to Enable Content Security Policy (CSP) Headers on Webflow Without Enterprise Upgrade?

Mike Mott asked January 24, 2025 12:44

Answered

Hi all! Is it true that if you want to enable CSP headers you either have to pay for enterprise or migrate the site off Webflow hosting?

3 comments

Tyler Bell January 24, 2025 12:45

Unfortunately that’s true!

0
Mike Mott OP January 24, 2025 12:45

Thanks! That's a major business fail!

Do you have any ideas of how I can migrate the site off Webflow hosting? Not sure how that would work

0
Raquel Lopez January 24, 2025 12:46

You'll have to export your Webflow code and uploading into a different hosting platform. You would loose WYSIWYG capabilities Webflow natively provides unless you export Webflow and reupload your whole site per any change that you do.
https://help.webflow.com/hc/en-us/articles/33961386739347-Code-export#faq-and-troubleshooting-tips

I believe you might be able to force CSP headers if you use a Reverse Proxy as a middleman before getting to Webflow. Might be worth taking a look before having to consider hosting/platform migration https://www.youtube.com/watch?v=O6TbDJ4yuGk

0

Please sign in to leave a comment.