[jira] [Assigned] (ATLAS-5160) Remove deprecated X-XSS-PROTECTION header from HTTP response headers initialization and Atlas Spring Security Config

["Paresh Devalia (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ATLAS-5160?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Paresh Devalia reassigned ATLAS-5160:
-------------------------------------

    Assignee: Paresh Devalia  (was: Aditya Gupta)

> Remove deprecated X-XSS-PROTECTION header from HTTP response headers initialization and Atlas Spring Security Config
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: ATLAS-5160
>                 URL: https://issues.apache.org/jira/browse/ATLAS-5160
>             Project: Atlas
>          Issue Type: Improvement
>          Components:  atlas-core
>            Reporter: Aditya Gupta
>            Assignee: Paresh Devalia
>            Priority: Major
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> One of the headers included is X-XSS-PROTECTION, which is now deprecated and no longer supported by modern browsers.
>  * Remove the X-XSS-PROTECTION response header
>  * Remove related constants ({{{}X_XSS_PROTECTION_KEY{}}}, {{{}X_XSS_PROTECTION_VAL{}}}) if no longer referenced
>  * Update tests (including {{{}HeadersUtilTest, AtlasSecurityConfigTest{}}}) accordingly
> h3. Expected Outcome
>  * Atlas no longer sends deprecated headers



--
This message was sent by Atlassian Jira
(v8.20.10#820010)