Jon,

On 4/25/23 10:15, Christopher Schultz wrote:
Jon,

On 4/20/23 16:39, jonmcalexan...@wellsfargo.com.INVALID wrote:
Hellow again.

I hae another app team that is getting hit with a QID 11827 stating that the hsts Security header is missing. We have reviewed the web.xml and the appropriate section and filter are present. hstsEnabled is set to true. Performing a curl aganst the site does NOT show the hsts STRICT header.

WEB.XML

Which web.xml? And is the filename really capitalized?

Oh, and also, what does your <Connector> look like for port 8443?

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to