--- title: Create a content security rule --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/go) [Page Shield](https://developers.cloudflare.com/api/go/resources/page_shield) [Policies](https://developers.cloudflare.com/api/go/resources/page_shield/subresources/policies) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Create a content security rule client.PageShield.Policies.New(ctx, params) (\*[PolicyNewResponse](), error) POST/zones/{zone\_id}/page\_shield/policies Creates a rule that applies a client-side security action when its filter expression matches. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `Page Shield``Domain Page Shield``Zone Settings Write` ##### ParametersExpand Collapse
params PolicyNewParams ZoneID param.Field\[string] Path param: Identifier maxLength32 Link to this property
Action param.Field\[PolicyNewParamsAction] Body param: The action to take if the expression matches const PolicyNewParamsActionAllow PolicyNewParamsAction = "allow" Link to this property const PolicyNewParamsActionLog PolicyNewParamsAction = "log" Link to this property const PolicyNewParamsActionAddReportingDirectives PolicyNewParamsAction = "add\_reporting\_directives" Link to this property
Link to this property Description param.Field\[string] Body param: A description for the policy Link to this property Enabled param.Field\[bool] Body param: Whether the policy is enabled Link to this property Expression param.Field\[string] Body param: The expression which must match for the policy to be applied, using the Cloudflare Firewall rule expression syntax Link to this property Value param.Field\[string] Body param: The policy which will be applied Link to this property
[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(method)%20create%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
type PolicyNewResponse struct{…} ID string Identifier maxLength32 Link to this property
Action PolicyNewResponseAction The action to take if the expression matches One of the following: const PolicyNewResponseActionAllow PolicyNewResponseAction = "allow" Link to this property const PolicyNewResponseActionLog PolicyNewResponseAction = "log" Link to this property const PolicyNewResponseActionAddReportingDirectives PolicyNewResponseAction = "add\_reporting\_directives" Link to this property
Link to this property Description string A description for the policy Link to this property Enabled bool Whether the policy is enabled Link to this property Expression string The expression which must match for the policy to be applied, using the Cloudflare Firewall rule expression syntax Link to this property Value string The policy which will be applied Link to this property
[Link to this property](<#(resource)%20page_shield.policies%20%3E%20(model)%20PolicyNewResponse%20%3E%20(schema)>) ### Create a content security rule Go HTTPTypeScriptPythonGoTerraform ``` package main import ( "context" "fmt" "github.com/cloudflare/cloudflare-go" "github.com/cloudflare/cloudflare-go/option" "github.com/cloudflare/cloudflare-go/page_shield" ) func main() { client := cloudflare.NewClient( option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"), ) policy, err := client.PageShield.Policies.New(context.TODO(), page_shield.PolicyNewParams{ ZoneID: cloudflare.F("023e105f4ecef8ad9ca31a8372d0c353"), Action: cloudflare.F(page_shield.PolicyNewParamsActionAllow), Description: cloudflare.F("Checkout page CSP policy"), Enabled: cloudflare.F(true), Expression: cloudflare.F(`ends_with(http.request.uri.path, "/checkout")`), Value: cloudflare.F("script-src 'none';"), }) if err != nil { panic(err.Error()) } fmt.Printf("%+v\n", policy.ID) } ``` 200 example ``` { "result": { "id": "023e105f4ecef8ad9ca31a8372d0c353", "action": "allow", "description": "Checkout page CSP policy", "enabled": true, "expression": "ends_with(http.request.uri.path, \"/checkout\")", "value": "script-src 'none';" }, "success": true, "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ] } ``` ##### Returns Examples 200 example ``` { "result": { "id": "023e105f4ecef8ad9ca31a8372d0c353", "action": "allow", "description": "Checkout page CSP policy", "enabled": true, "expression": "ends_with(http.request.uri.path, \"/checkout\")", "value": "script-src 'none';" }, "success": true, "errors": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ], "messages": [ { "code": 1000, "message": "message", "documentation_url": "documentation_url", "source": { "pointer": "pointer" } } ] } ```