---
schema_version: "1"
id: 58aa0cf9d101cfae559212734dbd8797ca4fb90bb5a9048e9c139c98141f897f
title: Monitor Browser Access Patterns and Unexpected Changes
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/b2c_20_7_w7501840_app_server_response_header_la.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.b2c_20_7_w7501840_app_server_response_header_la.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 5b76394f284b6348f8fd7e4c59b9c86d89e1839ae27a91ed2a22f384fbbd58f1
description: You can use the method dw.system.Response.addHttpHeader to specify a response header of Content-Security-Policy-Report-Only for storefront requests.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Monitor Browser Access Patterns and Unexpected Changes

You can use the method `dw.system.Response.addHttpHeader` to specify a response header of Content-Security-Policy-Report-Only for storefront requests.

What: The Content-Security-Policy-Report-Only response header instructs browsers to report violations of a policy to a specified URI. Depending on your policy, it's possible to have many violation reports. You must direct the reports to an external system that is not B2C Commerce, typically a third party. Information about policy violations can help you understand browser access patterns and detect unexpected changes that are possibly the result of malicious actors.

#### See Also

- [Content Security Policy Level 3](https://www.w3.org/TR/CSP3/#cspro-header)
- [dw.system.Response](https://documentation.b2c.commercecloud.salesforce.com/DOC3/topic/com.demandware.dochelp/DWAPI/scriptapi/html/api/class_dw_system_Response.html)