[Feature request] VBM 365 Restore Portal - HTTP header fields

[jan.ohrndorf]

Based on a security analysis of our VBM 365 environment, I was asked to add the following HTTP header fields to the Restore Portal in order to increase security:
- Cache-Control
- Content-Security-Policy
- X-Content-Type-Options

Since a change to the headers mentioned can only be implemented by Veeam, I am submitting this feature request.

Is adding these headers a valuable enhancement, and would it actually increase security? Or can these headers be omitted?

Many thanks in advance for your response and your opinions!

[Mildur]

Hi Jan,

Thank you for your request.
I can’t comment on whether it increases security, but I’ll forward it to our internal security team for review.

Best regards,
Fabian

[jan.ohrndorf]

Hi Fabian,

thank you very much!

Best regards
Jan