Re: How do I set a couple of HTTP headers?

[Brad Stone <bvstone@xxxxxxxxx>]

This may help:

https://httpd.apache.org/docs/2.4/mod/mod_headers.html

A google search brought up a log of examples from stackoverflow, etc as
well.

For the most part the IBM i Apache server is the same as other platforms.

On Wed, Nov 23, 2022 at 8:47 AM Tom Hightower <tomh@xxxxxxxxxxx> wrote:

> We're undergoing a web vulnerability audit and we've been advised to do
> set two things:
>
>
> X-Content-Type-Options:
> Apache: Header always set X-Content-Type-Options: nosniff
>
> HTTP Strict-Transport-Security:
> Apache: Header always set Strict-Transport-Security "max-age=31536000;
> includeSubDomains"
>
> How do I set those two headers in the 'standard' Apache config?
>
> Thanks!
> TomH
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com