I am trying to add the following headers to a domain in OpenLiteSpeed 1.6.11.
X-XSS-Protection 1;mode=block
X-Frame-Options SAMEORIGIN
Referrer-Policy strict-origin-when-cross-origin
X-Content-Type-Options nosniff
What I did this added a static context definition in the Virtual Host Settings and then added the following headers mentioned above under "Header Operations". When I checked the headers in my browser, it looks like all the headers are appended together. So I went ahead and added the same headers in another test server running an older version of OpenLiteSpeed 1.6.10 with near identical configuration and it works fine there. So is there any way to get this working in 1.6.11? Did anything change with the header directives in the newer release?
X-XSS-Protection 1;mode=block
X-Frame-Options SAMEORIGIN
Referrer-Policy strict-origin-when-cross-origin
X-Content-Type-Options nosniff
What I did this added a static context definition in the Virtual Host Settings and then added the following headers mentioned above under "Header Operations". When I checked the headers in my browser, it looks like all the headers are appended together. So I went ahead and added the same headers in another test server running an older version of OpenLiteSpeed 1.6.10 with near identical configuration and it works fine there. So is there any way to get this working in 1.6.11? Did anything change with the header directives in the newer release?
