We are adding security headers for our websites and we are trying with options available. we have fixed the security headers in Apache servers under httpd.conf file.
Now we are updating the security headers for our websites which are ruing on tomcat, we tried with options available on goolge after surfing nothing worked.
We need to update following headers for our sites, can anyone help us on this.
Strict-Transport-Security Content-Security-Policy X-Frame-Options X-XSS-Protection X-Content-Type-Options
Thanks, Gowtham.V