Report Only Content Security Policy

Laurens Bossen

Question

Hi!

I am working on implementing a Content Security Policy at my organization and didn't find the option to activate the 'Report-Only' header.

Is this not possible in Outsystems? Or do I need a trick that I don't know about.

I would really like to validate my CSP before making it final.

Thanks!

Laurens

22 Jan 2020

Joao Cacilhas

Hi Laurens,

Have you tried using the AddHeader action from the HTTPRequestHandler extension ?

You can find it on Manage Dependencies.

22 Jan 2020

Laurens Bossen

Hi,

No I haven't tried that since I don't want to go into all of my code to just add this header manually.

The way to do it now is via Lifetime so I kinda expected it to be an option there.

03 Feb 2020

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.