securityheaders | Bash script for checking HTTP headers for security | Command Line Interface library

631138519 seconds is 20 years, if an average year is 365.2421985 days long. Where does that number of days come from? I'm not sure, but it seems to represent the tropical year to an arbitrary degree of precision.

If I had to guess, I'd say that someone picked 20 years as a really long time, then looked up the number of days in a year and happened to see that value. Then other sites just copied the first one.

I've found the answer. So posting it here if anybody needs it. Within the SessionOptions, set Cookie.Name to prefix+name.

Below __Secure- is prefix in Session Cookie Name.

What you are trying to do is not possible on Win32 Outlook Client. Your Step #2 (XMLHttpRequest) effectively creates two version of the item, one on the client and one on the server. When the item is eventually sent, one will overwrite the other (most likely the one sent from the client), and overrides the changes that you made.

setCustomHeaders in 1.8 was created to address this problem. setCustomHeaders, actually does not rely on the server for it's functionality, so it should work as long as your client supports 1.8.

Office 2019 (retail) does support 1.8. Office 2019 (volume-licensing) does not.

https://docs.microsoft.com/en-us/office/dev/add-ins/reference/requirement-sets/outlook-api-requirement-sets

Users on the volume licensed version will need to upgrade to get this support.

You can change Content-Security-Policy in your code. It's the better way to solve your issure.

Related Blog. How To Secure Node.js Applications with a Content Security Policy

I found that in azure linux, it is not directly known which webserver is used in the linux server, so I did not try the following method. If you are interested, you can raise a support for help, let Microsoft Engineer help you.

As you use linux platform, so you need to determine which webserver you use in your web app.

1. If use apache, you can add .htaccess file to solve the issue.

   Implement Content Security Policy using local htaccess file (Apache)

2. If nginx, you can add yourcustom.conf file to do that.

   https://gist.github.com/plentz/6737338

Since no one could directly give me a help, i found by myself the answer that works like a charm.

What is the Permissions Policy header

The Permission Policy header is a security header that controls which browser features can be used. Besides implementing these rules for your own content it can also prevent external iframes from using these browser features, making it a powerful header to secure your site.

This allows you to have fine-grained control over which browser functions your site can use. There are a lot of directives that can be controlled with the Permission Policy header. For an extensive overview of all directives see New Permissions-Policy Directives and Features

And the code inside the .htaccess file is:

In your case best fit is Terraform dynamic blocks.

https://www.terraform.io/docs/language/expressions/dynamic-blocks.html

Here is a quick example(It can be improved)

Add this code

This response is not coming from the server, it is handled by their frontend and they can't remove the specific header.

The article you found to add in web.config which is run on IIS. Refer to this issue.

You can raise a support issue with Microsoft Azure.

Here is a similar SO thread you could refer to.

The ACL is wrong, seems edited, in application scope you're using My Project instead of MyProject, I modified it and works well: