How to set HTTP headers?

Hi!

I need to set X-XSS-Protection: 0 HTTP Header on ITMill 5.4 application. How can I do this in ITMill application?

I need to do this to prevent IE 8 to use Cross-Site Scripting filter with iframe ((http://blogs.msdn.com/ie/archive/2008/07/02/ie8-security-part-iv-the-xss-filter.aspx)). Is there any other way to do this?

  • markus

Hi,

You could extend ApplicationServlet and set the header in service() or set up a Filter in web.xml to write the headers.

Best Regards,
Marc