How to add http response headers in asp.net 5.0

Question

My web application which build on .NET 5.0. How can I add below http response headers?

X-Frame-Options     

Content-Security-Policy  

X-XSS-Protection 

X-Content-Type-Options

Above http response headers are missing from web application.

Ben D · Accepted Answer · 2022-11-04 14:33:32Z

1

I find the easiest approach is in the Startup.cs file:

app.Use(async (context, next) =>
    {
        context.Response.Headers.Add("Header-Name", "Header-Value");
        await next();
    });

Make sure you add this call before before calling UseEndpoints, UseMvc etc.

If you prefer to add these in the web.config, it can be achieved by

<configuration>
  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <add name="Header-Name" value="Header-Value" />
      </customHeaders>
    </httpProtocol>
  </system.webServer>
</configuration>

answered Nov 4, 2022 at 14:33

Ben D

8611 gold badge14 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

cr7oo Over a year ago

Yeah as per your answer i added headers but Content-Security-Policy values affecting my html content . What are the values for Content-Security-Policy header that won't be affecting my html and css content

Ben D Over a year ago

How is the html content affected? This might be useful - blog.elmah.io/content-security-policy-in-asp-net-mvc

Collectives™ on Stack Overflow

How to add http response headers in asp.net 5.0

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related