Share via

Add XSS Header to API Management Legacy Portal website

Gharl Leroux Breed 1 Reputation point
2020-11-05T14:15:54.157+00:00

The legacy portal doesn't provide an option to add custom headers.
Is there a way to update the config file or add “X-XXS-Protection" header through the Azure API Management blade?

Azure API Management
Azure API Management
An Azure service that provides a hybrid, multi-cloud management platform for APIs.
2,047 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pramod Valavala 20,616 Reputation points Microsoft Employee
    2020-11-06T14:37:16.553+00:00

    There is no way to add custom headers through config. An alternate would be to front your developer portal with a service that can add those headers for you like Azure Application Gateway or even proxy requests through APIM itself adding the headers as required using policies.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.