Best practice regarding Security-Relevant HTTP Headers

[magosk]

If you use 15.1, IW will do the CSP stuff for you without the need to do it manually as its more than simply setting headers.

Thanks for the info. Yes, this is with 15.1.7 (IW standalone server). Is there some setting for enabling this, I do not see any Content-Security-Policy header being sent by IntraWeb? Or should I add this header myself according to the suggestion above?

Best regards

Magnus Oskarsson