Hello,
we try to set some server header in an ABAP backend system.
We set the parameter
icm/HTTP/mod_0 =REFIX=/,FILE=/usr/sap/.../security/data/modifications.rules
In the file modifications.rules we only put this lines
SetResponseHeader Strict-Transport-Security "max-age=31536000; includeSubDomains"
SetResponseHeader X-Content-Type-Options nosniff
SetResponseHeader X-XSS-Protection "1;mode=block"
SetResponseHeader X-Content-Security-Policy "default-src 'self'"
We can call the URL an everything seems OK, but if we press F5 either in the Internet Explorer or Firefox we get a blank Screen.
We try to set only on Header, but equal which Header we put in the file. The result is the same.
Has someone an idea why this happens
Kind regards,
Bernhard
