diff --git a/obp-api/src/main/resources/props/sample.props.template b/obp-api/src/main/resources/props/sample.props.template index 4873fddc09..401c2fe1a7 100644 --- a/obp-api/src/main/resources/props/sample.props.template +++ b/obp-api/src/main/resources/props/sample.props.template @@ -1273,9 +1273,6 @@ expectedOpenFuturesPerService=100 # Enable /Disable IBAN validation validate_iban=false -set_response_header_Set-Cookie = "Path=/; HttpOnly; Secure" - - # Show all dependent connector methods for each endpoint. The default value is false. # If set to true, it may consume a significant amount of heap memory. #show_used_connector_methods=false \ No newline at end of file diff --git a/obp-api/src/main/scala/bootstrap/liftweb/Boot.scala b/obp-api/src/main/scala/bootstrap/liftweb/Boot.scala index 370d913e51..9ba6c1f1f7 100644 --- a/obp-api/src/main/scala/bootstrap/liftweb/Boot.scala +++ b/obp-api/src/main/scala/bootstrap/liftweb/Boot.scala @@ -680,14 +680,9 @@ class Boot extends MdcLoggable { } - val setCookieHeader: (String, String) = getPropsValue("set_response_header_Set-Cookie") match { - case Full(value) => ("Set-Cookie", value) - case _ => ("Set-Cookie", "Path=/; HttpOnly; Secure") - } //for XSS vulnerability, set X-Frame-Options header as DENY LiftRules.supplementalHeaders.default.set( ("X-Frame-Options", "DENY") :: - setCookieHeader :: Nil )