IT42653: TO HAVE PRELOAD DIRECTIVE IN HSTS HEADER OF WEBUI PAGES

APAR status

• Closed as requirement.

Error description

• The webUI pages does not have preload directive in HSTS header.
  

Local fix

Problem summary

• ****************************************************************
  USERS AFFECTED:
  All users of App Connect Enterprise V11 and V12 and IBM
  Integration Bus V10 <span style="background-color:rgb(255, 255,
  255)">who needs HSTS header with preload directive in webUI
  pages.</span>
  
  
  Platforms affected:
  MultiPlatform
  
  ****************************************************************
  PROBLEM DESCRIPTION:
  The App Connect Enterprise and IBM Integration Bus webui pages
  will hot have preload directive in HSTS header,
  Strict-Transport-Security: max-age=600000; includeSubDomains
  The customer need to have preload directive in HSTS header,
  Strict-Transport-Security: max-age=86400000; includeSubDomains;
  preload
  

Problem conclusion

• The ACE webUI pages have been updated to include preload
  directive in HSTS header.
  

Temporary fix

Comments

• TO HAVE PRELOAD DIRECTIVE IN HSTS HEADER OF WEBUI PAGES.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels