FBBKERNSERV-193

diff --git a/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml b/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
index c7821e01e033b5bddb72c078b863f09b74c70b2c..3c4878030e802e8330c569039b97a1dca609d79f 100644 (file)
--- a/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
@@ -55,6 +55,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/webservice/web"

diff --git a/customer/fbb-www/dev-www-fbb.pixelpark.net.yaml b/customer/fbb-www/dev-www-fbb.pixelpark.net.yaml
index a384d23c8a5bfa54e677448f4c864a0d26065905..0c03d18b14f4018d15cd41794912c0bcc9d3c0ae 100644 (file)
--- a/customer/fbb-www/dev-www-fbb.pixelpark.net.yaml
+++ b/customer/fbb-www/dev-www-fbb.pixelpark.net.yaml
@@ -38,6 +38,8 @@ php::settings:
 
 apache::default_vhost: false
 
+
+
 infra::profile::apache::htdigest:
   server:
     www: ENC[PKCS7,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]
@@ -52,6 +54,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/berlin-airport/web"