Question

3
Replies
1803
Views
 Akshay Garg (AkshayG2)
Expedia

Expedia
IN
AkshayG2 Member since 2014 7 posts
Expedia
Posted: February 22, 2018
Last activity: February 23, 2018
Posted: 22 Feb 2018 1:54 EST
Last activity: 23 Feb 2018 5:29 EST
Closed

Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat

Hi,

Can we add security headers like Content-Security-Policy in PRPC 5.5 running on Tomcat?

Thanks!

Security
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 3 years ago
Posted: 22 Feb 2018 16:24 EST
Brad Tainter (Br@dTainter_GCS)
PEGA
Client Solutions Fellow
Pegasystems Inc.
US

Hi Akshay,


CSP isn't supported in Pega 7 until version 7.1.6.  As such, for your 5.5SP1 version, there is nothing available to define the headers.  If you review the following document, it describes how you can set the header via your webserver:  https://content-security-policy.com/​  Go to the bottom of the page and look for Apache Content-Security-Policy Header
Posted: 3 years ago
Posted: 23 Feb 2018 5:29 EST
Akshay Garg (AkshayG2)
Expedia

Expedia
IN

Thanks Brad. Link you shared was helpful. Since our application is built on 5.5 version and it is supported on IE only. 


However CSP is not supported in IE yet so it seems we won't be able to proceed further.


Thanks again.