3420210 - Update to Security Header and Compatible Browser Versions

HTTP security headers provide extra security for your web applications by restricting the actions that the browser and server allow once your site is running. SAP Ariba solutions add a number of default security headers to all requests to your site. These security headers are added to the site every time a user renders your web application in any standard browser.

The following secruity headers are now enabled as part of this feature:

• Strict-Transport-Security
• X-Content-Type-Options
• Permissions Policy
• Referrer-Policy

After updating the security header, users might notice better security and improved compatibility with different browsers.

However, if user is using the older version, they might face problems with page navigation, loading pages, and displaying content.

Ariba Applications and SAP Business Network  

Security Header Compatible Browser Versions Navigation issue Page not loading Content Security Policy HTTP Strict Transport Security (HSTS) X-Content Type Options X-Frame Options , KBA , BNS-ARI-PCP-BF , Base Framework , Known Error