How I can set security header for my angular application hosted in app service

Question

I have my angular we app hosted in app service.
with framework .Net and operating system as Windows.

How can I set the security headers like.

Content-Security-Policy

X-Content-Type-Options

X-Frame-Options

Answer 1

Hi Sandesha,

You can add it to your web.config file and place it in the root of your webapp. Sample web.config file below :

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <httpProtocol>
            <customHeaders>
                <add name="X-Frame-Options" value="headerValue" />
                <add name="X-Content-Type-Options" value="headerValue" />
                <add name="Content-Security-Policy" value="headerValue" />
            </customHeaders>
        </httpProtocol>
    </system.webServer>
</configuration>

Another method, if you have a server-side code running, would be to add the headers to the response via code.

Please click Accept Answer and upvote if the above was useful.

Thanks.

-TP