SAP Knowledge Base Article - Preview

3420210 - Update to Security Header and Compatible Browser Versions

Symptom

HTTP security headers provide extra security for your web applications by restricting the actions that the browser and server allow once your site is running. SAP Ariba solutions add a number of default security headers to all requests to your site. These security headers are added to the site every time a user renders your web application in any standard browser.

The following secruity headers are now enabled as part of this feature:

  • Strict-Transport-Security
  • X-Content-Type-Options
  • Permissions Policy
  • Referrer-Policy

After updating the security header, users might notice better security and improved compatibility with different browsers.

However, if user is using the older version, they might face problems with page navigation, loading pages, and displaying content.


Read more...

Environment

Ariba Applications and SAP Business Network  

Keywords

Security Header Compatible Browser Versions Navigation issue Page not loading Content Security Policy HTTP Strict Transport Security (HSTS) X-Content Type Options X-Frame Options , KBA , BNS-ARI-PCP-BF , Base Framework , Known Error

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.