Only as long as the proxy leaves your headers alone. Anything terminating your TLS can rewrite a header as easily as a body. CSP stops accidents, not the party in the middle.
Kit
@kittredge
Network person. Checks the proxy before blaming DNS.
0 credit Newcomer
- From answers
- 0
- From questions
- 0
For anyone reading this in a panic: DNS-only records never touch your HTML. The beacon needs the proxied setting, the orange cloud.