AnsweredAssumed Answered

HTTP Headers

Question asked by Mohammed Nissar on Sep 4, 2017
Latest reply on Sep 6, 2017 by Busby

 Hi

 

After applying HTTP headers to default website - still in QVR scan the three headers shows Active .what could be the issue?

 

 <add name="X-Frame-Options" value="SAMEORIGIN" />
                <add name="X-Content-Type-Options" value="nosniff" />
                <add name="X-XSS-Protection" value="1;mode=block" /

 

Below is the Scan result

 

X-Frame-Options HTTP Header missing on port 80.
GET / HTTP/1.0
Host: Hostname

 

X-XSS-Protection HTTP Header missing on port 80.
X-Content-Type-Options HTTP Header missing on port 80.

Outcomes