|
|
|
|
@ -263,7 +263,8 @@
@@ -263,7 +263,8 @@
|
|
|
|
|
<title><literal><headers></literal></title> |
|
|
|
|
<para>This element allows for configuring additional (security) headers to be send with the response. |
|
|
|
|
It enables easy configuration for several headers and also allows for setting custom headers through |
|
|
|
|
the <link linkend="nsa-header">header</link> element. |
|
|
|
|
the <link linkend="nsa-header">header</link> element. Additional information, can be found in the |
|
|
|
|
<link linkend="headers">Security Headers</link> section of the reference. |
|
|
|
|
<itemizedlist> |
|
|
|
|
<listitem><literal>Cache-Control</literal>, <literal>Pragma</literal>, and <literal>Expires</literal> - Can be set using the |
|
|
|
|
<link linkend="nsa-cache-control">cache-control</link> element. This ensures that the |
|
|
|
|
@ -523,7 +524,8 @@
@@ -523,7 +524,8 @@
|
|
|
|
|
<title><literal><csrf></literal></title> |
|
|
|
|
<para>This element will add <link xlink:href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">Cross Site Request Forger (CSRF)</link> |
|
|
|
|
protection to the application. It also updates the default RequestCache |
|
|
|
|
to only replay "GET" requests upon successful authentication.</para> |
|
|
|
|
to only replay "GET" requests upon successful authentication. Additional information can be found in the <link linkend="csrf">Cross Site |
|
|
|
|
Request Forgery (CSRF)</link> section of the reference.</para> |
|
|
|
|
<section xml:id="nsa-csrf-parents"> |
|
|
|
|
<title>Parent Elements of <literal><csrf></literal></title> |
|
|
|
|
<itemizedlist> |
|
|
|
|
|