A vulnerability auditing to our IT infrastructure found that responses from Openshift Web Console didn't have Strict-Transport-Security and X-XSS-Protection HTTP headers, and recommended that we configured web console to include those headers in all responses.
Does Openshift allow to add custom HTTP headers to web console HTTP responses ? If yes, how ?
we are using Openshift 3.6.
Thanks in advance for any help.