External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-09 15:02:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Adding x-robots HTTP header to all Keycloak resources (#44864)

Browse Source 
Closes #44863

Signed-off-by: Alexander Schwartz <alexander.schwartz@ibm.com>
This commit is contained in:
Alexander Schwartz 2026-01-07 15:11:54 +01:00 committed by GitHub
parent a9a89005fa
commit 3b01bbb551
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
services/src/main/java/org/keycloak/headers/DefaultSecurityHeadersProvider.java
View File

@ -93,6 +93,7 @@ public class DefaultSecurityHeadersProvider implements SecurityHeadersProvider {
addHeader(BrowserSecurityHeaders.STRICT_TRANSPORT_SECURITY, headers);
addHeader(BrowserSecurityHeaders.X_CONTENT_TYPE_OPTIONS, headers);
addHeader(BrowserSecurityHeaders.REFERRER_POLICY, headers);
addHeader(BrowserSecurityHeaders.X_ROBOTS_TAG, headers);
}
private void addRestHeaders(MultivaluedMap<String, Object> headers) {
@ -100,6 +101,7 @@ public class DefaultSecurityHeadersProvider implements SecurityHeadersProvider {
addHeader(BrowserSecurityHeaders.X_FRAME_OPTIONS, headers);
addHeader(BrowserSecurityHeaders.X_CONTENT_TYPE_OPTIONS, headers);
addHeader(BrowserSecurityHeaders.REFERRER_POLICY, headers);
addHeader(BrowserSecurityHeaders.X_ROBOTS_TAG, headers);
}
private void addHtmlHeaders(MultivaluedMap<String, Object> headers) {

1
tests/base/src/test/java/org/keycloak/tests/admin/AdminHeadersTest.java
View File

@ -32,6 +32,7 @@ public class AdminHeadersTest {
assertDefaultValue(BrowserSecurityHeaders.X_FRAME_OPTIONS, h);
assertDefaultValue(BrowserSecurityHeaders.X_CONTENT_TYPE_OPTIONS, h);
assertDefaultValue(BrowserSecurityHeaders.REFERRER_POLICY, h);
assertDefaultValue(BrowserSecurityHeaders.X_ROBOTS_TAG, h);
response.close();
}