Edit HTTP response headers

HTTP response headers protect users against a wide range of threats. Collibra Platform and Collibra Console each have a number of HTTP response headers in place, but you can add, edit or remove headers if needed.

Prerequisites

Steps

  1. Open the DGC service settings for editing:
    1. Open Collibra Console.
      Collibra Console opens with the Infrastructure page.
    2. In the tab pane, expand an environment to show its services.
    3. In the tab pane, click the Data Governance Center service of that environment.
    4. Click Configuration.
    5. Click Edit configuration.
  2. In the HTTP headers section, make the necessary changes:

    Tip Hover your mouse cursor over the steps to see where to click!

    1. If required, edit the values of the existing HTTP response headers.
    2. If required, add a new HTTP response header scope:
      1. Click Add at the bottom of the section.
        A new section appears.
      2. Enter the required information.

        Field

        Description

        URL pattern

        The pattern of the URLs to which the HTTP response header is applied.

        This field supports wildcard characters such as **, *, and ?.

        Tip The following pattern matches all URLs: /**

        HTTP headers

        The HTTP response headers in a key-value format.

        You can add new HTTP response headers by clicking Add at the bottom of the section, and entering the HTTP response header name as the field key and the HTTP response header value as the field value.

    3. If required, add a new HTTP response header in an existing scope:
      1. Click Add at the bottom of the relevant scope.
        The Add map option dialog box appears.
      2. Enter the required information.

        Field

        Description

        Field key

        The name of the HTTP response header.

        Field value

        The value of the HTTP response header.

        Tip You can also use whitelists to add multiple trusted web domains in one go.

      3. Click Add map option.
    4. If required, remove an HTTP response header from a section by clicking next to the HTTP response header.
    5. If required, remove an entire HTTP header scope, by clicking in the upper right corner of the scope.
  3. If required, edit whitelists of HTTP response headers.
  4. Click Save all.
  1. Open Collibra Console with a user profile that has the SUPER role.
    Collibra Console opens with the Infrastructure page.
  2. In the main menu, click Console settings.
  3. In the HTTP headers section, make the necessary changes:

    Tip Hover your mouse cursor over the steps to see where to click!

    1. If required, edit the values of the existing HTTP response headers.
    2. If required, add a new HTTP response header scope:
      1. Click Add at the bottom of the section.
        A new section appears.
      2. Enter the required information.

        Field

        Description

        URL pattern

        The pattern of the URLs to which the HTTP response header is applied.

        This field supports wildcard characters such as **, *, and ?.

        Tip The following pattern matches all URLs: /**

        HTTP headers

        The HTTP response headers in a key-value format.

        You can add new HTTP response headers by clicking Add at the bottom of the section, and entering the HTTP response header name as the field key and the HTTP response header value as the field value.

    3. If required, add a new HTTP response header in an existing scope:
      1. Click Add at the bottom of the relevant scope.
        The Add map option dialog box appears.
      2. Enter the required information.

        Field

        Description

        Field key

        The name of the HTTP response header.

        Field value

        The value of the HTTP response header.

        Tip You can also use whitelists to add multiple trusted web domains in one go.

      3. Click Add map option.
    4. If required, remove an HTTP response header from a section by clicking next to the HTTP response header.
    5. If required, remove an entire HTTP header scope, by clicking in the upper right corner of the scope.
  4. If required, edit whitelists of HTTP response headers.
  5. Click Save all.