Michael Smith created IMPALA-12031: -------------------------------------- Summary: Add security-related HTTP headers Key: IMPALA-12031 URL: https://issues.apache.org/jira/browse/IMPALA-12031 Project: IMPALA Issue Type: Improvement Components: Frontend Affects Versions: Impala 4.2.0 Reporter: Michael Smith
Add * {{Strict-Transport-Security: max-age=31536000; includeSubDomains}} when Impala serves HTTPS. Note that Impala's web server only serves HTTP or HTTPS, never both at once. * {{X-Content-Type-Options: nosniff}}. Impala does not provide any way to upload files. * {{Cache-control: no-store}} to Impala's web UI to provide additional comfort for security folks. -- This message was sent by Atlassian Jira (v8.20.10#820010)