Update api-gateway.yml

Another addition to set the x-Content-Type-Options to nosniff
Enterprise-CMCS · Jun 8, 2024 · 6c7b405 · 6c7b405
1 parent dd25f4e
commit 6c7b405
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/services/app-api/resources/api-gateway.yml b/services/app-api/resources/api-gateway.yml
@@ -14,6 +14,13 @@ Resources:
       ResponseParameters:
         gatewayresponse.header.Access-Control-Allow-Origin: "'*'"
         gatewayresponse.header.Access-Control-Allow-Headers: "'*'"
+        Type: 'AWS::ApiGateway::GatewayResponse'
+      Properties:
+        ResponseParameters:
+          gatewayresponse.header.X-Content-Type-Options: "'nosniff'"
+        ResponseType: DEFAULT_4XX
+        RestApiId:
+          Ref: 'ApiGatewayRestApi'
       ResponseType: DEFAULT_5XX
       RestApiId:
         Ref: "ApiGatewayRestApi"