https://bz.apache.org/bugzilla/show_bug.cgi?id=58735
Bug ID: 58735
Summary: Add support for X-XSS-Protection header
Product: Tomcat 9
Version: 9.0.0.M1
Hardware: All
OS: All
Status: NEW
Severity: minor
Priority: P2
Component: Catalina
Assignee: dev@tomcat.apache.org
Reporter: jacopo.cappell...@gmail.com
Created attachment 33349
--> https://bz.apache.org/bugzilla/attachment.cgi?id=33349&action=edit
The patch that implements this feature.
The Tomcat's HttpHeaderSecurityFilter allows to set useful security related
headers but it doesn't support the X-XSS-Protection header:
https://www.owasp.org/index.php/List_of_useful_HTTP_headers
The attached patch enhance the filter to support this header.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
