Forum Discussion
HSTS for Custom Response page
i have the same issue with (Strict-Transport-Security Content-Security-Policy X-Frame-Options X-XSS-Protection X-Content-Type-Options Referrer-Policy )
i added the header response section but not worked :(
when HTTP_RESPONSE {
if { !([ HTTP::header exists "X-XSS-Protection" ])}{HTTP::header insert "X-XSS-Protection" "1; mode=block"}
if { !([ HTTP::header exists "X-Frame-Options" ])} { HTTP::header insert "X-Frame-Options" "SAMEORIGIN" }
if { !([ HTTP::header exists "Strict-Transport-Security" ])} { HTTP::header insert "Strict-Transport-Security" "max-age=16070400" }
if { !([ HTTP::header exists "X-Content-Type-Options" ])} { HTTP::header insert "X-Content-Type-Options" "'nosniff'" }
if { !([ HTTP::header exists "content-security-policy " ])} { HTTP::header insert "content-security-policy" "" } }
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com