[
https://issues.apache.org/jira/browse/SLING-7760?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jason Bailey updated SLING-7760:
--------------------------------
Summary: Sling Main Servlet - Change header configuration to a service
(was: Contextual Additional Response Headers)
> Sling Main Servlet - Change header configuration to a service
> -------------------------------------------------------------
>
> Key: SLING-7760
> URL: https://issues.apache.org/jira/browse/SLING-7760
> Project: Sling
> Issue Type: Improvement
> Reporter: Jason E Bailey
> Assignee: Jason E Bailey
> Priority: Major
>
> Currently, for us to set the global response headers we need to add these to
> the Sling Main Servlet.
> The problem with this is
> * Any changes to the Sling Main Servlet ends up with the service restarting.
> This has a negative overall effect to the environment
> * We run multiple domains out of a single instance. For a
> Content-Security-Header we end up putting in exemptions that should apply to
> one site for all sites. This is problematic from a security perspective
> Ideally we would be able to configure headers based on the domain that's
> being requested
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
