Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat
Hi,
Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat?
Thanks!
Updated: 22 Feb 2018 4:37 EST
Pegasystems Inc.
IN
Hi Akshay,
https://collaborate.pega.com/question/content-security-policy-headers-response
Above should help you in how to do it. However I think CSP header support began with IE 10.
Thanks,
Ujjwal
Pegasystems Inc.
US
Hi Akshay,
CSP isn't supported in Pega 7 until version 7.1.6. As such, for your 5.5SP1 version, there is nothing available to define the headers. If you review the following document, it describes how you can set the header via your webserver: https://content-security-policy.com/ Go to the bottom of the page and look for Apache Content-Security-Policy Header
Expedia
IN
Thanks Brad. Link you shared was helpful. Since our application is built on 5.5 version and it is supported on IE only.
However CSP is not supported in IE yet so it seems we won't be able to proceed further.
Thanks again.