[
https://issues.apache.org/jira/browse/NIFI-9995?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Nathan Gough updated NIFI-9995:
-------------------------------
Fix Version/s: 1.17.0
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Replace Custom Header Filters with Spring Security Filters
> ----------------------------------------------------------
>
> Key: NIFI-9995
> URL: https://issues.apache.org/jira/browse/NIFI-9995
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework
> Reporter: David Handermann
> Assignee: David Handermann
> Priority: Minor
> Fix For: 1.17.0
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
> The NiFi Jetty Server uses the following custom Servlet Filters to apply
> standard security-related HTTP response headers:
> * ContentSecurityPolicyFilter
> * StrictTransportSecurityFilter
> * XContentTypeOptionsFilter
> * XFrameOptionsFilter
> * XSSProtectionFilter
> Spring Security includes a standard HeaderWriterFilter with standard writers
> for all of these response headers. Replacing multiple Servlet Filters with a
> single Filter simplifies the filter chain invocation for all HTTP requests
> and provides the same response headers.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
