# Is there anyway to update HTTP header in auth0 hosted page?

**URL:** <https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813>\
**Category:** Get Help\
**Tags:** auth0\
**Created:** [January 31, 2019, 11:39am UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813 "2019-01-31T11:39:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![mano](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mano/32/10259_2.png) [@mano](https://community.auth0.com/u/mano)\
**Post date:** [January 31, 2019, 11:39am UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813/1 "2019-01-31T11:39:11Z")

</div>

We have to update HTTP header in auth0 hosted page for security enhancement.  
Following things need to be updated.

1. X-XSS-Protection
2. X-Frame-Options
3. X-Content-Type-Options

---

<div class="post-metadata">

**Author:** ![James.Morrison](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/james.morrison/32/13507_2.png) [@James.Morrison](https://community.auth0.com/u/James.Morrison)\
**Post date:** [February 5, 2019, 2:41pm UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813/3 "2019-02-05T14:41:48Z")

</div>

Hi there @mano, you should be able to edit the header directly on the Universal Login page from the dashboard in the section below. Please let me know if you have any questions or if I am miss understanding the request. I linked the Universal Login documentation for context as well. Thanks!

 ![44%20AM](https://global.discourse-cdn.com/auth0/original/2X/9/9b9a00bc88177cd06ffb0141daab3ed0c68809f3.png)

> **[Auth0 Universal Login](https://auth0.com/docs/authenticate/login/auth0-universal-login)**
>
> Describes how Auth0 Universal Login provides you with the means to prove your users' identities with our authorization server.

---

<div class="post-metadata">

**Author:** ![mano](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mano/32/10259_2.png) [@mano](https://community.auth0.com/u/mano)\
**Post date:** [February 6, 2019, 4:29am UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813/4 "2019-02-06T04:29:32Z")

</div>

@James.Morrison

We have already added those settings according to your guidelines that you have mentioned. But it hasn’t affected the main domain that we used. Can you please tell us following way that we used to add for the hosted page is correct or wrong? We have tested using the [https://observatory.mozilla.org](https://observatory.mozilla.org) website. But it still shows without new settings.

**Added the settings to header as follows.**

 ![image](https://global.discourse-cdn.com/auth0/original/2X/6/6f891fa190041946ba1696dcf6acae299de0fda0.png)

---

<div class="post-metadata">

**Author:** ![James.Morrison](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/james.morrison/32/13507_2.png) [@James.Morrison](https://community.auth0.com/u/James.Morrison)\
**Post date:** [February 13, 2019, 10:06pm UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813/5 "2019-02-13T22:06:06Z")

</div>

I wanted to follow up @mano, can you clarify what is the difference between the main domain vs the universal login page. Where exactly are you seeing this behavior? Do you have a link you can share so we can dive into it further? Thanks in advance.

---

<div class="post-metadata">

**Author:** ![James.Morrison](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/james.morrison/32/13507_2.png) [@James.Morrison](https://community.auth0.com/u/James.Morrison)\
**Post date:** [February 23, 2019, 10:06pm UTC](https://community.auth0.com/t/is-there-anyway-to-update-http-header-in-auth0-hosted-page/20813/6 "2019-02-23T22:06:07Z")

</div>

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.