Re: Enabling X-XSS-Protection

2015-12-14 Thread Jacopo Cappellato
Hi Mark, I have created a ticket and attached a patch to it: https://bz.apache.org/bugzilla/show_bug.cgi?id=58735 Thanks, Jacopo On 08/10/2015, Mark Thomas wrote: > On 08/10/2015, Jacopo Cappellato wrote: >>... >> Do you think that HttpHeaderSecurityFilter should be enhanced to support >> this

Re: Enabling X-XSS-Protection

2015-10-08 Thread Mark Thomas
On 08/10/2015 06:40, Jacopo Cappellato wrote: > Hi all, > > I am looking for a way to add the X-XSS-Protection header (*) to the > response from Tomcat. > > I am currently using the Tomcat's HttpHeaderSecurityFilter that allows to > setup other useful security related headers but it doesn't seem

Enabling X-XSS-Protection

2015-10-07 Thread Jacopo Cappellato
Hi all, I am looking for a way to add the X-XSS-Protection header (*) to the response from Tomcat. I am currently using the Tomcat's HttpHeaderSecurityFilter that allows to setup other useful security related headers but it doesn't seem to support the X-XSS-Protection header (**). Do you think t