Question

3
Replies
1523
Views
Close popover
Akshay Garg (AkshayG2)
Expedia

Expedia
IN
View ProfileSend Message
AkshayG2 Member since 2014 7 posts
Expedia
Posted: February 22, 2018
Last activity: February 23, 2018
Closed

Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat

Hi,

Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat?

Thanks!

Security
Close popover
Moderation Team has archived post
Posted: 3 years ago
Close popover
Brad Tainter (Br@dTainter_GCS)
PEGA
Client Solutions Fellow
Pegasystems Inc.
US
View ProfileSend Message

Hi Akshay,


CSP isn't supported in Pega 7 until version 7.1.6.  As such, for your 5.5SP1 version, there is nothing available to define the headers.  If you review the following document, it describes how you can set the header via your webserver:  https://content-security-policy.com/​  Go to the bottom of the page and look for Apache Content-Security-Policy Header

Posted: 3 years ago
Close popover
Akshay Garg (AkshayG2)
Expedia

Expedia
IN
View ProfileSend Message

Thanks Brad. Link you shared was helpful. Since our application is built on 5.5 version and it is supported on IE only. 


However CSP is not supported in IE yet so it seems we won't be able to proceed further.


Thanks again.
Share this page Share via LinkedIn Copying...
Copied!