Forum

Hi,

I keep getting warning in YetiForce that my Header are noty set correctly.
See email here https://drive.google.com/open?id=1n2rFPFOf4qd2lNaTqLXVvrPhsfAzMtqD
Could you please tell me if the following is correct?

CustomHeaderClient = X-Frame-Options: sameorigin
CustomHeaderClient = X-XSS-Protection: 1; mode=block
CustomHeaderClient = X-Content-Type-Options: nosniff
CustomHeaderClient = X-Robots-Tag: none
CustomHeaderClient = X-Permitted-Cross-Domain-Policies:	none
CustomHeaderClient = Referrer-Policy: same-origin
CustomHeaderClient = Expect-CT: enforce; max-age=3600
CustomHeaderClient = Strict-Transport-Security:	max-age=31536000; includeSubDomains; preload

The CustomHeaderClient is to make Hiawatha send HTTP headers to the client. That won't change anything for YetiForce. You need to find out what (CGI) header YetiForce wants to see.