<headers>This element allows for configuring additional (security) headers to be send with the response.
It enables easy configuration for several headers and also allows for setting custom headers through
- the header element.
+ the header element. Additional information, can be found in the
+ Security Headers section of the reference.
Cache-Control, Pragma, and Expires - Can be set using the
cache-control element. This ensures that the
@@ -523,7 +524,8 @@
<csrf>This element will add Cross Site Request Forger (CSRF)
protection to the application. It also updates the default RequestCache
- to only replay "GET" requests upon successful authentication.
+ to only replay "GET" requests upon successful authentication. Additional information can be found in the Cross Site
+ Request Forgery (CSRF) section of the reference.Parent Elements of <csrf>