X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=epsdk-app-onap%2Fsrc%2Fmain%2Fwebapp%2FWEB-INF%2Fweb.xml;fp=epsdk-app-onap%2Fsrc%2Fmain%2Fwebapp%2FWEB-INF%2Fweb.xml;h=e445bac5c958b34483065db59a410410c0066eb5;hb=8cef7fbeed5b8f1255535fcf1cf0c7304df6d447;hp=e90f837d301baf13f976cf812704a1c3831b427b;hpb=703613901b1c8d9db5b7e5473b156eeb08e247c3;p=vid.git

diff --git a/epsdk-app-onap/src/main/webapp/WEB-INF/web.xml b/epsdk-app-onap/src/main/webapp/WEB-INF/web.xml
index e90f837d3..e445bac5c 100755
--- a/epsdk-app-onap/src/main/webapp/WEB-INF/web.xml
+++ b/epsdk-app-onap/src/main/webapp/WEB-INF/web.xml
@@ -70,6 +70,23 @@
     <filter-name>charset-to-utf8-filter</filter-name>
     <url-pattern>/app/ui/*</url-pattern>
   </filter-mapping>
+      <filter>
+    <filter-name>httpHeaderSecurity</filter-name>
+    <filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
+    <async-supported>true</async-supported>
+    <init-param>
+      <param-name>antiClickJackingEnabled</param-name>
+      <param-value>true</param-value>
+    </init-param>
+    <init-param>
+      <param-name>antiClickJackingOption</param-name>
+      <param-value>DENY</param-value>
+    </init-param>
+  </filter>
+  <filter-mapping>
+    <filter-name>httpHeaderSecurity</filter-name>
+    <url-pattern>/*</url-pattern>
+  </filter-mapping>
 
   <error-page>
     <error-code>404</error-code>