From 5a2952709380263d19995a8e5db1177f59a86095 Mon Sep 17 00:00:00 2001
From: fett0 <fernando.gmaidana@gmail.com>
Date: Fri, 15 Dec 2023 18:39:29 +0000
Subject: ocserv: T5796: add CLI knob "http-security-headers"

OCserv manual recommended HTTP headers tobe included in the configuration.

(cherry picked from commit ad65d37ddf92ec8416c84707d7d41e63346b550c)
(cherry picked from commit 24f449cc099703df95646c719e9d3f308ed1a3f0)
---
 interface-definitions/vpn-openconnect.xml.in | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'interface-definitions')

diff --git a/interface-definitions/vpn-openconnect.xml.in b/interface-definitions/vpn-openconnect.xml.in
index 75c64a99a..736084f8b 100644
--- a/interface-definitions/vpn-openconnect.xml.in
+++ b/interface-definitions/vpn-openconnect.xml.in
@@ -260,6 +260,12 @@
               </leafNode>
             </children>
           </node>
+          <leafNode name="http-security-headers">
+            <properties>
+              <help>Enable HTTP security headers</help>
+              <valueless/>
+            </properties>
+          </leafNode>
           <node name="ssl">
             <properties>
               <help>SSL Certificate, SSL Key and CA</help>
-- 
cgit v1.2.3