Add option to set custom response headers in UI portals

[SanojPunchihewa]

Problem

Currently, we cannot set custom response headers for the web pages served in the portals(publisher, dev and admin). It's better to have this feature so any user can easily set response headers depending on their use cases. Such as setting a custom CSP header.

Solution

Add the option to set custom response headers in UI portals

Affected Component

APIM

Version

No response

Implementation

No response

Related Issues

IS improvement : wso2/product-is#9088

Suggested Labels

No response

[Avishka-Shamendra]

Hi all,

ResponseHeaderSetFilter class (wso2/carbon-kernel#3071) which is already pre packed in the carbon-kernel can be used for this. However, currently we have to manually place the filter in the tomact/web.xml.j2 when needed with the headers. wso2/carbon-kernel#3627 introduces the option that allows users to set the headers through the deployment.toml

[[tomcat.custom_response_header_filters]]
headers = "X-WSO2-Test-Header:Test Value, X-WSO2-Test-Header-2:Test Value-2"
filter_url_pattern = "/*"

[Avishka-Shamendra]

• Docs Issue - Document the option available to set custom response headers in UI portals docs-apim#7164
• CSP will be addressed in - Add a content-security-policy for UI portals #2062