[
https://issues.apache.org/jira/browse/NIFI-9995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
David Handermann updated NIFI-9995:
-----------------------------------
Status: Patch Available (was: Open)
> Replace Custom Header Filters with Spring Security Filters
> ----------------------------------------------------------
>
> Key: NIFI-9995
> URL: https://issues.apache.org/jira/browse/NIFI-9995
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Time Spent: 10m
> Remaining Estimate: 0h
>
> The NiFi Jetty Server uses the following custom Servlet Filters to apply
> standard security-related HTTP response headers:
> * ContentSecurityPolicyFilter
> * StrictTransportSecurityFilter
> * XContentTypeOptionsFilter
> * XFrameOptionsFilter
> * XSSProtectionFilter
> Spring Security includes a standard HeaderWriterFilter with standard writers
> for all of these response headers. Replacing multiple Servlet Filters with a
> single Filter simplifies the filter chain invocation for all HTTP requests
> and provides the same response headers.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
