{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/bigcommerce/main/json-schema/bigcommerce-storefront-security-settings-schema.json", "title": "StorefrontSecuritySettings", "x-generated": "2026-10-12", "x-method": "derived", "x-generator": "derive-json-schema.py", "x-source": "openapi/bigcommerce-storefront-security-api-openapi.yml#/components/schemas/StorefrontSecuritySettings", "type": "object", "properties": { "csp_header": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "header_value": { "type": "string" } } }, "hsts": { "type": "object", "properties": { "enabled": { "type": "boolean" }, "include_preload": { "type": "boolean" }, "include_subdomains": { "type": "boolean" }, "max_age": { "$ref": "#/$defs/HSTSMaxAgeEnumValues" } } }, "sitewide_https_enabled": { "type": "boolean" }, "x_frame_options_header": { "type": "object", "properties": { "allowed_url": { "type": "string" }, "enabled": { "type": "boolean" }, "setting": { "type": "string", "enum": [ "deny", "same_origin", "allow_from_url" ] } } } }, "x-internal": false, "$defs": { "HSTSMaxAgeEnumValues": { "type": "string", "enum": [ "zero_seconds", "five_minutes", "one_year" ], "title": "HSTSMaxAgeEnumValues", "x-tags": [ "Models" ] } } }