Add capability to add HTTP security headers to Peoplesoft.
Can we get the capability to add HTTP Security headers in Peoplesoft through WebProfile configuration or some such? For example, currently there is no way to add things like Content-Security-Policy
headers through the Peoplesoft configuration interface (whether in Webprofile config or other configuration menu.)
It is possible to inject this via a LoadBalancer like F5 but there is no clear indication from Oracle/Peoplesoft as to what values would work for a given PeopleTools release and what the canonical headers optiosn are supposed to be. This is very application specific, so the "stab in the dark' approach is rather dangerous to pursue.