FBBKERNSERV-101 cdmws

diff --git a/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml b/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
index 84988f8e183c2c179b1d0d9aad7ec5024414f120..104335e13e07c0b4d28c9c8aecf06c20363c3b97 100644 (file)
--- a/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
@@ -99,6 +99,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/cdm-webservice/web"

diff --git a/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml b/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
index effec42b981d4e148a326784ea83da171d6ea38e..b7da2b2029d3c87aee8ec7b5708f55f85da99005 100644 (file)
--- a/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
@@ -99,6 +99,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/cdm-webservice/web"

diff --git a/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml b/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
index 52155a10e3e5159730e47d75fd7c853322a8f4ea..a4c5479011fbff1f927ca6d2d7f000ca89102942 100644 (file)
--- a/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
@@ -99,6 +99,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/cdm-webservice/web"

diff --git a/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml b/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
index 8f05d1d1220cd28363d3c735c07e8c74eeee11b5..662dc795b64c9f961819479a3a9e2571c2308258 100644 (file)
--- a/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
@@ -99,6 +99,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/cdm-webservice/web"