search

enonic / app-contentstudio

Content Studio of Enonic XP
GNU General Public License v3.0
10 stars 4 forks source link

Testing the Headers config #1356

Closed jsi closed 4 years ago

jsi commented 4 years ago

https://developer.enonic.com/docs/xp/stable/deployment/config#header_filter

Please add a new file to the config of the UI test server. Name it com.enonic.xp.web.header.cfg, and include the exact same string as described in the documentation.

Then add a test, that checks the headers for the right values when previewing a page in admin.

This is the feature we are testing: https://github.com/enonic/xp/issues/7632

jsi commented 4 years ago

Example of the same from nightly: https://vault.enonic.io/Enonic-Cloud/enonic-nightly/src/master/exp/config/com.enonic.xp.web.header.cfg

jsi commented 4 years ago

This is what it looks like on QA:

x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block