Setting Security Headers like X-Content-Type
Open
relates-to:spring-security
- Dominant language
- Groovy
- Stars
- 2.9k
- Forks
- 975
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 92
Description
Setting Security Headers like X-Content-Type
I have set the headers in conf/web.xml in Tomcat 8.5.69 but it is not working so found out that we can do it with spring security as well.
Grails Version: 2.5.5
Spring Security Core Plugin: 2.0.0
Tomcat Version: 8.5.69
Can someone help?
Contributor guide
Research direction
Start with conf/web.xml and the Spring Security Core plugin configuration for the reported Grails 2.5.5 setup. Reproduce the missing X-Content-Type header on Tomcat 8.5.69, then verify the selected configuration causes the expected security header to appear.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- groovy, spring
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100