HI Team, I use tls and xhttp module to enable websocket interface for webrtc client to connect. I wanted to add "Strict-Transport-Security" header to xhttp response to add security. But currently I don't see a way to add it anywhere.
I can see only server_header as an option, But this will get added to SIP messages as well. It 'd be great if anybody has a suggestion around this.
Thanks Varunan
Varunan,
Have you tried https://www.kamailio.org/docs/modules/devel/modules/textops.html#textops.f.a... before calling * xhttp_reply*?
Cheers, Ihor
Le mer. 19 juin 2024 à 08:05, Sasivarunan via sr-users < sr-users@lists.kamailio.org> a écrit :
HI Team, I use tls and xhttp module to enable websocket interface for webrtc client to connect. I wanted to add "Strict-Transport-Security" header to xhttp response to add security. But currently I don't see a way to add it anywhere.
I can see only server_header as an option, But this will get added to SIP messages as well. It 'd be great if anybody has a suggestion around this.
Thanks Varunan __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send an email to sr-users-leave@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
HI Ihor I've tried it already, It doesn't append this header in Http response.
KSR.hdr.*append_to_reply*("Strict-Transport-Security: max-age=63072000"); KSR.xhttp.xhttp_reply("200", "Ok", "text/plain", "working");
On Wed, Jun 19, 2024 at 3:12 PM Ihor Olkhovskyi via sr-users < sr-users@lists.kamailio.org> wrote:
Varunan,
Have you tried https://www.kamailio.org/docs/modules/devel/modules/textops.html#textops.f.a... before calling * xhttp_reply*?
Cheers, Ihor
Le mer. 19 juin 2024 à 08:05, Sasivarunan via sr-users < sr-users@lists.kamailio.org> a écrit :
HI Team, I use tls and xhttp module to enable websocket interface for webrtc client to connect. I wanted to add "Strict-Transport-Security" header to xhttp response to add security. But currently I don't see a way to add it anywhere.
I can see only server_header as an option, But this will get added to SIP messages as well. It 'd be great if anybody has a suggestion around this.
Thanks Varunan __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send an email to sr-users-leave@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
-- Best regards, Ihor (Igor) __________________________________________________________ Kamailio - Users Mailing List - Non Commercial Discussions To unsubscribe send an email to sr-users-leave@lists.kamailio.org Important: keep the mailing list in the recipients, do not reply only to the sender! Edit mailing list options or unsubscribe:
-
Ihor Olkhovskyi -
Sasivarunan