Secure HTTP Gateway headers

Secure HTTP headers in application session responses can be added on the gateways, which can help to protect users of the application.

There is no direct security impact associated without the headers, but supporting them aids in achieving security in depth.

Adjust http.conf on the Gateway:

Header set Cross-Origin-Embedder-Policy "require-corp"
Header set Cross-Origin-Opener-Policy "same-origin"
Header set Permissions-Policy "geolocation=(self), camera=()"
Header set X-Permitted-Cross-Domain-Policies "none"