Installation and Configuration Guide

Back Next

Configuring Security Headers for the Portal

If you want to enable all the security headers in the Supplier Portal using the content security policy, add the

portal.security.httpHeaders.enabled

and

portal.security.httpHeaders.Content-Security-Policy

properties in the

cmxserver.properties

file. The content security policy is a layer of security that protects the portal from external attacks.

Navigate to the following directory:

<MDM installation directory>/hub/server/resources

In a text editor, open the

cmxserver.properties

file.

To enable security headers in the portal URL and configure the content security policy, add the following properties:

Property	Value
portal.security.httpHeaders.enabled	true
portal.security.httpHeaders.Content-Security-Policy	default-src 'self'; frame-ancestors 'self';script-src 'self'

You can configure the

portal.security.httpHeaders.Content-Security-Policy

property only if you set the

portal.security.httpHeaders.enabled

property to true.

Save the

cmxserver.properties

file.

Watch

Comments

0 COMMENTS

We’d like to hear from you! Log in to comment.