SOAP Web Service security header

[former_member747670]

Hi Experts

I need to know how to add the following security headers to a SAP SOAP API WSDL for a non PI, SOAP Web Service based integration:

• Strict-Transport-Security
• Content-Security-Policy
• X-Frame-Options
• X-XSS-Protection
• Expect-CT
• X-Content-Type-Options
• Cache-Control

Thanks in advance.

[JoeGoerlich]

Hi Anurag,

for almost all of them you need to do header modification inside the ICM using modification rules in a file specified by profile parameter. icm/HTTP/mod_<xx>.

For Strict-Transport-Security with SAP Kernel 7.53 the profile parameter `icm/HTTP/strict_transport_security' was made available.

Hint: X-Frame-Options and X-XSS-Protection are considered as deprecated.

Br,

Joe