Modify HTTP request headers with Transform Rules
Jun 8, 2021Sam Marsh

Summary
Introduced HTTP Request Header Modification as a new action within Transform Rules, providing a no-code interface for administrators to modify HTTP request headers before they are sent to origin servers. This feature allows setting, removing, or dynamically populating headers using static values, Cloudflare functions (concat, regex_replace, to_string, lower), and dynamic values like Bot Score or visitor country. This offers an easier alternative to Cloudflare Workers for header manipulation.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack