Re: How do I set a couple of HTTP headers?

Thanks! I'll see what I can do with these.

TomH
________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Brad Stone <bvstone@xxxxxxxxx>
Sent: Wednesday, November 23, 2022 8:51 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: How do I set a couple of HTTP headers?

This may help:

https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhttpd.apache.org%2Fdocs%2F2.4%2Fmod%2Fmod_headers.html&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874355540%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=9d6%2FvJ6y7KDtl2YYF1Pp0uf9gOOFGNIM3lnNcAUTVPg%3D&amp;reserved=0

A google search brought up a log of examples from stackoverflow, etc as
well.

For the most part the IBM i Apache server is the same as other platforms.

On Wed, Nov 23, 2022 at 8:47 AM Tom Hightower <tomh@xxxxxxxxxxx> wrote:

We're undergoing a web vulnerability audit and we've been advised to do
set two things:


X-Content-Type-Options:
Apache: Header always set X-Content-Type-Options: nosniff

HTTP Strict-Transport-Security:
Apache: Header always set Strict-Transport-Security "max-age=31536000;
includeSubDomains"

How do I set those two headers in the 'standard' Apache config?

Thanks!
TomH
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874355540%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=QNR0iei85Qik0xQ5dtqm0pNeTkpX9se7%2F7eVIolS6kU%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874355540%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=E4izSbmK3RHASGPYIMpfxgtVzp7vmHHvs90WIdgie78%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com%2F&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874355540%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=FbDcBT1W%2FfeEUxxu3OjW8tS8YszRrLOfrSva06bp8cM%3D&amp;reserved=0

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874355540%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=QNR0iei85Qik0xQ5dtqm0pNeTkpX9se7%2F7eVIolS6kU%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874511764%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=%2BokMgGnY2FkgSWHvkaInJmsAuihqawGN67i87I5IyPM%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com%2F&amp;data=05%7C01%7Ctomh%40idocket.com%7C219c4c2e635547414a1008dacd6231ce%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C638048118874511764%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=Vx8XPFACZPx%2FT6vruSBNUIUcUrKynPSkQzuu6FsSJlw%3D&amp;reserved=0