How do I set the CSP and HSTS for an Azure app?

Wilson, TaRan (Avison Young - US) 20 Reputation points
2024-03-29T18:59:04.9266667+00:00

I have created an Azure app and use a custom domain to access it. However, when putting the URL through our cyber security process, it came back that the CSP and HSTS needs to be updated. I cannot find where in Azure to update the security headers. Where can I update the CSP and HSTS for my app?

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,775 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,277 questions
0 comments
Accepted answer
  1. Andriy Bilous 11,176 Reputation points MVP
    2024-03-29T21:36:12.2066667+00:00

    Hello Wilson, TaRan (Avison Young - US)

    HSTS can be enabled in multiple ways: API Management - https://video2.skills-academy.com/en-us/answers/questions/845443/add-hsts-to-an-azure-api-management-service

    App Gateway -  https://techcommunity.microsoft.com/t5/azure/azure-application-gateway-app-service-secure-headers/m-p/2231277

    App Service with Docker Containers - https://azureaggregator.wordpress.com/2022/10/31/adding-hsts-header-in-the-nginx-based-app-service/

    Code - https://video2.skills-academy.com/en-us/aspnet/core/security/enforcing-ssl?view=aspnetcore-8.0&tabs=visual-studio%2Clinux-ubuntu#options

    Also If you want to follow best security practices and implement Strict Transport Security and Secure Headers in your Azure App Service you will need to add Security Headers in web.config or htaccess files in your web application’s root folder. https://itgala.xyz/implementing-security-headers-in-azure-app-service/

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest