FBBKERNSERV-193 test and live

diff --git a/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml b/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
index f4ca0ac1b3e6ef441c35dcf2289fb73c2a858fb5..81e9cec19669eb624d41c6889aabd1df95096ff7 100644 (file)
--- a/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/dev-ws-fbb.pixelpark.net.yaml
@@ -91,6 +91,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/cdm-webservice/web"

diff --git a/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml b/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
index 92b8d11429ead0dd08f34d752150140e7a635d89..84988f8e183c2c179b1d0d9aad7ec5024414f120 100644 (file)
--- a/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/prd-ws01-fbb.pixelpark.net.yaml
@@ -59,6 +59,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/webservice/web"

diff --git a/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml b/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
index 1d067ca63a47b1e69f88e3d791a528a81d0bba01..effec42b981d4e148a326784ea83da171d6ea38e 100644 (file)
--- a/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/prd-ws02-fbb.pixelpark.net.yaml
@@ -59,6 +59,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/webservice/web"

diff --git a/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml b/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
index b4ee3bb0f67166e95776a1fab02d639832e8cc89..52155a10e3e5159730e47d75fd7c853322a8f4ea 100644 (file)
--- a/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/tst-ws01-fbb.pixelpark.net.yaml
@@ -59,6 +59,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/webservice/web"

diff --git a/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml b/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
index 25e6c9444237875717349935c7984d9c956e63c8..8f05d1d1220cd28363d3c735c07e8c74eeee11b5 100644 (file)
--- a/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
+++ b/customer/fbb-ws/tst-ws02-fbb.pixelpark.net.yaml
@@ -59,6 +59,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/webservice/web"

diff --git a/customer/fbb-www/production.yaml b/customer/fbb-www/production.yaml
index 6b069dea5f50e927a9b00f3ba0190a6310f64c81..f6678c5ce862017607ed79e02e9cb16d4649f981 100644 (file)
--- a/customer/fbb-www/production.yaml
+++ b/customer/fbb-www/production.yaml
@@ -65,6 +65,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: "/var/www/berlin-airport/web"

diff --git a/customer/fbb-www/test.yaml b/customer/fbb-www/test.yaml
index 1a5f607c6bcd2f6f9d68551944ef57cd2f641725..a3f2d1719cc9e288caa05e584e45742c0be1b1a6 100644 (file)
--- a/customer/fbb-www/test.yaml
+++ b/customer/fbb-www/test.yaml
@@ -57,6 +57,10 @@ infra::profile::apache::pp_vhosts:
     setenv:
       - AIRLINE_DATA /www/data/fiona/app/online/docs/_airlines/index.php
       - POI_CMS_EXPORT_FILE /www/data/fiona/app/online/docs/poiExport/index.php
+    headers:
+      - 'set X-Content-Type-Options: nosniff'
+      - 'set X-XSS-Protection: "1; mode=block"'
+      - 'set X-Frame-Options: DENY'
     directories:
       - provider: 'directory'
         path: '/var/www/berlin-airport/web'