[ https://issues.apache.org/jira/browse/CXF-8829?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17707084#comment-17707084 ]
Andriy Redko commented on CXF-8829: ----------------------------------- Hi [~jithuthomas] , I afraid CXF does not support that out of the box > How to add custom security output headers to apache karaf cxf listing page > http://localhost:8181/cxf in apache-karaf 4.3.6 > -------------------------------------------------------------------------------------------------------------------------- > > Key: CXF-8829 > URL: https://issues.apache.org/jira/browse/CXF-8829 > Project: CXF > Issue Type: Wish > Components: Configuration, JAX-RS > Environment: I use apache-karaf 4.3.6 and java version "1.8.0_202" . > Reporter: Jithu Thomas > Priority: Major > > I want to understand how to add custom security output headers to apache > karaf cxf listing page http://localhost:8181/cxf . As of now I can see the > the output headers coming is content-type and content-length. I want to add > the security headers also in output header after the > http://localhost:8181/cxf request. I use apache-karaf 4.3.6 and java version > "1.8.0_202" . I want to add the following headers to the output headers. > Strict-Transport-Security X-Frame-Options X-XSS-Protection > X-Content-Type-Options Content-Security-Policy > What is the best way to achieve this. > I tried adding properties to org.ops4j.pax.web.cfg file, but it didnt work > out. -- This message was sent by Atlassian Jira (v8.20.10#820010)