CSP HTTP Headers
I want to setup a Content-Security-Policy HTTP Header in our Siebel Application.
I see that Tomcat has a filter (httpHeaderSecurity) defined in the web.xml of my AI configuration.
Still, when I access the application I don't get any Content-Security-Policy header from the server.
Is this documented somewhere? What should I edit to have this CSP?