Francesco Chicchiriccò created SYNCOPE-1513:
-----------------------------------------------
Summary: Allow to customize security headers
Key: SYNCOPE-1513
URL: https://issues.apache.org/jira/browse/SYNCOPE-1513
Project: Syncope
Issue Type: Improvement
Components: console
Reporter: Francesco Chicchiriccò
Assignee: Francesco Chicchiriccò
Fix For: 2.1.6, 3.0.0
At the moment the following security headers are statically set by
{{SyncopeConsoleApplication}}:
{code}
response.setHeader("X-XSS-Protection", "1; mode=block");
response.setHeader("X-Content-Type-Options", "nosniff");
response.setHeader("X-Frame-Options", "sameorigin");
{code}
Improve this by changing the code above to read security headers from
{{console.properties}}.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
