NarlaSandeepNarlaSaibaba 243f74f10d Horizon – API Handling – HTTP Security Headers Not Present
Added new X-Content-Type-Options: nosniff header to make sure the browser
does not try to detect a different Content-Type than what is actually
sent (can lead to XSS)

Added new Header and set X-Permitted-Cross-Domain-Policies: "none"

Change-Id: I6f89ffb44ad805039c4074889a7c15fbef6fc95e
2019-10-18 15:31:14 +00:00
..
2019-04-15 11:15:35 +02:00