DJDX21_252164
Cirrus
CirrusIf the headers are already present in case of HSTS or Content security policy one can override with the new header by removing the old header
Like this:
~~~
when HTTP_RESPONSE {
set strictTransportSecurityHeader {"Strict-Transport-Security"}
if { [HTTP::header exists $strictTransportSecurityHeader] } {
HTTP::header remove $strictTransportSecurityHeader
}
HTTP::header insert Strict-Transport-Security "max-age=31536000; includeSubDomains"
}
~~~