search

Widen / cloudfront-auth

An AWS CloudFront Lambda@Edge function to authenticate requests using Google Apps, Microsoft, Auth0, OKTA, and GitHub login
ISC License
623 stars 148 forks source link

Configurable Response Headers #60

Open thatsjet opened 4 years ago

thatsjet commented 4 years ago

As a security-minded website owner, I would like to be able to add relevant headers to secure the site, such as Content-Security-Policy: default-src='self' and X-Frame-Options: deny

payton commented 4 years ago

Ultimately, you would want to add another Lambda function that executes on Viewer Response. This function would then modify/add the relevant headers.

I'll leave this issue open as a feature request.