search

Azure / osdu-infrastructure

OSDU Azure Infrastructure as Code
Apache License 2.0
42 stars 39 forks source link

Need to configure AppGateway to return required security response headers #207

Closed slb-syang closed 3 years ago

slb-syang commented 4 years ago

Currently, the mandatory HTTP response headers are not returned when a path is not found or JWT header is missing or invalid in a request. Need to return the following mandatory headers from App Gateway: "X-XSS-Protection" "X-Content-Type-Options" "X-Frame-Options" "Cache-Control "Expires" "Strict-Transport-Security"

This feature may be required or custom rules can be added.

danielscholl commented 3 years ago

This feature/code has fully migrated to GitLab.