Security headers on Cloudflare Workers (Observatory vs a USDC audit)
If you ship on Cloudflare Workers, browsers still judge you by HTTP response headers: CSP, HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and friends.
Free checks first
MDN HTTP O