NEXTJS_MISSING_SECURITY_HEADERS
Last updated March 4, 2025
Conformance is available on Enterprise plans
Security headers are important to set to improve the security of your application. Security headers can be set for all routes in [ files] (https://nextjs.org/docs/advanced-features/security-headers). This conformance check requires that the security headers are set and use a valid value.
Required headers:
- Content-Security-Policy
- Strict-Transport-Security
- X-Frame-Options
- X-Content-Type-Options
- Referrer-Policy
Follow the Next.js security headers documentation to fix this Conformance test. That document will walk through each of the headers and also links to further documentation to understand what the headers do and how to set the best values for your application.
Was this helpful?