[AMBARI-17311] Modify HTTP headers to follow best security practices

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: trunk
• Fix Version/s: trunk, 2.5.0
• Component/s: ambari-server
• Assignee: Sangeeta Ravindran
• Reporter: Sangeeta Ravindran
• Created: 20/Jun/16 12:32
• Updated: 16/Mar/17 16:50
• Resolved: 10/Oct/16 18:20

Description

Add the following HTTP headers to follow security best practices.

X-Content-Type-Options: nosniff
Cache-control: no-store
Pragma: no-cache

Issue Links

• links to: ReviewBoard