Re: Setting security response headers when Valve returns error..

2023-06-12 Thread Mark Thomas
On 09/06/2023 19:34, Amit Pande wrote: Hello, Wanted some inputs on setting HSTS (or other response headers) when returning error from a valve. The server.xml has the valve "org.apache.catalina.valves.RemoteAddrValve" configured with a deny status of HTTP 404. Also, the Tomcat's web.xml has

Setting security response headers when Valve returns error..

2023-06-09 Thread Amit Pande
Hello, Wanted some inputs on setting HSTS (or other response headers) when returning error from a valve. The server.xml has the valve "org.apache.catalina.valves.RemoteAddrValve" configured with a deny status of HTTP 404. Also, the Tomcat's web.xml has "org.apache.catalina.filters.HttpHeaderS