https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494502#M16821 <P></P> <P>Hello,</P> <P>we try to set some server header in an ABAP backend system. </P> <P>We set the parameter </P> <P>icm/HTTP/mod_0 =REFIX=/,FILE=/usr/sap/.../security/data/modifications.rules</P> <P>In the file modifications.rules we only put this lines</P> <P>SetResponseHeader Strict-Transport-Security "max-age=31536000; includeSubDomains"<BR />SetResponseHeader X-Content-Type-Options nosniff<BR />SetResponseHeader X-XSS-Protection "1;mode=block"<BR />SetResponseHeader X-Content-Security-Policy "default-src 'self'"</P> <P>We can call the URL an everything seems OK, but if we press F5 either in the Internet Explorer or Firefox we get a blank Screen.<BR />We try to set only on Header, but equal which Header we put in the file. The result is the same.</P> <P>Has someone an idea why this happens</P> <P>Kind regards,<BR />Bernhard</P> Thu, 17 Aug 2017 07:16:02 GMT Former Member 2017-08-17T07:16:02Z https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494502#M16821 <P></P> <P>Hello,</P> <P>we try to set some server header in an ABAP backend system. </P> <P>We set the parameter </P> <P>icm/HTTP/mod_0 =REFIX=/,FILE=/usr/sap/.../security/data/modifications.rules</P> <P>In the file modifications.rules we only put this lines</P> <P>SetResponseHeader Strict-Transport-Security "max-age=31536000; includeSubDomains"<BR />SetResponseHeader X-Content-Type-Options nosniff<BR />SetResponseHeader X-XSS-Protection "1;mode=block"<BR />SetResponseHeader X-Content-Security-Policy "default-src 'self'"</P> <P>We can call the URL an everything seems OK, but if we press F5 either in the Internet Explorer or Firefox we get a blank Screen.<BR />We try to set only on Header, but equal which Header we put in the file. The result is the same.</P> <P>Has someone an idea why this happens</P> <P>Kind regards,<BR />Bernhard</P> Thu, 17 Aug 2017 07:16:02 GMT https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494502#M16821 Former Member 2017-08-17T07:16:02Z https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494503#M16822 <P>Hello Bernhard,</P><P>If you are just trying to set the header for HSTS please go throught the blog: <A href="https://blogs.sap.com/2019/12/17/hsts-http-strict-transport-security-with-sap-web-dispatcher">https://blogs.sap.com/2019/12/17/hsts-http-strict-transport-security-with-sap-web-dispatcher</A></P><P>Regards,</P><P>Akash</P> Wed, 18 Dec 2019 19:34:58 GMT https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494503#M16822 Akash_BL 2019-12-18T19:34:58Z https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494504#M16823 <P>Hi Bernhard,</P><P>Were you able to resolved this?</P><P>kind regards,</P><P>Ger</P> Wed, 03 Mar 2021 15:28:11 GMT https://community.sap.com/t5/application-development-and-automation-discussions/serverheader-in-icm/m-p/494504#M16823 former_member699926 2021-03-03T15:28:11Z