🍪 Cookie Notice

We use cookies to learn how you interact with our content, and show you relevant content and ads based on your browsing history. You can adjust your settings below. Here's our policy.

Cookie settings
Skip to main content
New

Security headers added to the GraphQL API

  • Security
  • Developer Experience
Books and Storyblok Logo

The GraphQL API now sends standard security headers. You don't need to do anything.


GraphQL API responses in the EU, US, AP and CA regions now include standard browser security headers: Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options and X-Frame-Options. Responses also no longer reveal the origin server software. Your queries, SDKs, CORS setup and integrations work as before.

Related Updates

New Elite Plan

Strata: Semantic Search and AI-Powered Content Discovery

  • Infrastructure
  • Content
  • Developer Experience
  • User Experience

Strata brings semantic search to Storyblok. Query stories by meaning rather than exact keywords, and use the results to power site search, chatbots, and retrieval-augmented generation pipelines.

New Starter Plan

Built-in Accessibility Checker

  • Accessibility
  • User Experience
  • Editing
  • Content
  • Developer Experience

The Accessibility Checker lets editors, marketers, and developers test the accessibility of their content directly in the Visual Editor. It uses axe-core and runs at the click of a button.