Security Headers Server Configurations

Review security header server configurations in Cortex XSOAR 6.13.

Key	Description	Default
http.same.site.cookie.attribute	Sets the SAMESITE cookie value to lax or strict lax enables the cookie to be sent on some cross-site requests. strict, does not allow the cookie to be sent on a cross-site request. Setting to strict can cause issues when configuring SSO.	lax
security.hsts.maxage	Sets the Max-Age attribute the number of required seconds that the cookie should expire.	31536000
security.hsts.preload	Users are not protected until after their first successful secure connection to a given domain (false). Can be set by changing to true.	false
content.security.policy.header.enabled	The HTTP Content-Security-Policy response header allows web site administrators to control resources the user agent is allowed to load for a given page.	false