Fix http response headers KPMG Pen test

[fxiang1]

Signed-off-by: Feng Xiang fxiang@redhat.com

Issue:
https://github.com/stolostron/backlog/issues/23853

• Add preload to sts

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fxiang1

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [fxiang1]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[fxiang1]

@pshickeydev Can you check the headers from the screenshot above to see if they meet the requirements from KPMG? Our app.js config is pretty much identical to the GRC one but I have no idea why we are still getting the duplicate headers. Wondering if that would be an issue?

Thanks!

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information