Merge pull request #1474 from Enterprise-CMCS/updateheader

Update serverless.yml
Enterprise-CMCS · Jun 10, 2024 · 4c8f296 · 4c8f296
2 parents 415ec76 + 47b6296
commit 4c8f296
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/services/app-api/resources/api-gateway.yml b/services/app-api/resources/api-gateway.yml
@@ -5,6 +5,7 @@ Resources:
       ResponseParameters:
         gatewayresponse.header.Access-Control-Allow-Origin: "'*'"
         gatewayresponse.header.Access-Control-Allow-Headers: "'*'"
+        gatewayresponse.header.X-Content-Type-Options: "'nosniff'"
       ResponseType: DEFAULT_4XX
       RestApiId:
         Ref: "ApiGatewayRestApi"

diff --git a/services/ui/serverless.yml b/services/ui/serverless.yml
@@ -235,7 +235,7 @@ resources:
             headers['strict-transport-security'] = { value: 'max-age=63072000; includeSubdomains; preload'};
             headers['x-frame-options'] = { value: 'SAMEORIGIN'};
             headers['x-frame-options'] = { value: 'DENY'};
-            headers['x-content-type-options'] = { value: 'NOSNIFF' };
+            headers['x-content-type-options'] = { value: 'nosniff' };
             return response;
           }
         FunctionConfig: