question

RosC-7130 avatar image
0 Votes"
RosC-7130 asked YijingSun-MSFT answered

How to resolve Missing HTTP security headers for Classic ASP

Hi ,
How do I add the following
-Strict-Transport-Security: max-age=xxx
-X-Content-Type-Options
for Classic ASP? I know that I can easily add all these in the web.config for ASP.NET .

For advice. Thank you.

dotnet-aspnet-general
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

YijingSun-MSFT avatar image
0 Votes"
YijingSun-MSFT answered

Hi @RosC-7130 ,
I think you could set the header in the ASP page using:

 <%
 Call Response.AddHeader("  ","  ")
 %>

Or you could set it from inside IIS.

Best regards,
Yijing Sun


If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our  documentation  to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.