Question
Information on how to add HTTP Security header in web services
Information on how to add HTTP Security header in Service SOAP response
Rulesstack Private Limited
IN
Hi @KethaR07 ,
To add HTTP Security headers in Pega Platform, you can use the HTTP response headers that are supported by your browser. Pega Platform supports the ability to add custom headers. However, it is important to note that Pega Platform only sends these headers on dynamic content requests and not on static content requests. You might consider adding the following security headers to your application:
- X-XSS-Protection – Prevents cross-site scripting. Prevents attackers from injecting client-side scripts into the website that is viewed from the user side. - Strict-Transport-Security – Allows a website to tell browsers that they should communicate only by using HTTPS, not HTTP
Please refer the below link for more information: https://docs-previous.pega.com/security/87/using-http-response-headers?
Thanks,
Bhargav
Zensar Technologies
IN
@BHARGAV Prakash I tried above process but it's not reflected in web services. Custom http response headers are set at the application level but not updated at service SOAP security header.