Specifying X-Frame-Options Vulnerabilities for OM Web Viewer 12.1
search cancel

Specifying X-Frame-Options Vulnerabilities for OM Web Viewer 12.1

book

Article ID: 74791

calendar_today

Updated On:

Products

Output Management Web Viewer

Issue/Introduction

This is an enhancement for Web Viewer to allow specification of new HTTP response headers.  Some headers maybe added by using Tomcat's filters. But not all headers. 

Environment

Output Management Web Viewer 12.1

Resolution

Apar SO00473 CUMULATIVE BUILD 181 FOR WEB VIEWER 12.1 Introduces the ability to implement new HTTP response headers. 
Apply the latest cumulative maintenance. 
The latest build (maintenance) for Output Management Web Viewer 12.1

Some headers maybe added by using Tomcat's filters. But not all headers. 

Instructions to implement new HTTP response header(s): 

  1. Add to the bottom of WVProfiles.properties file: 

    HEADERRESPONSE.HeaderNames=name1!name1!name3 
    HEADERRESPONSE.HeaderValues=value1!value2!value3 
  2. Recycle Tomcat.

Additional Information

CR24-NL Update title, Environment Section, create numbered list