Browser Based Launcher WebSocket HTTP Server Header Settings

By editing the gateway.conf file you can add your own HHTP headers, which can be used with the WebSocket HTTP Server used for the remote session gateway – this is separate to the website Passwordstate uses in Internet Information Services.

Examples of HTTP header attributes can be found here - https://developer.mozilla.org/enUS/docs/Web/HTTP/Headers

An example of the format you can add to the gateway.conf file is:

headers=Strict-Transport-Security: max-age=31536000\r\nx-frame-options: SAMEORIGIN\r\nX-ContentType-Options: nosniff\r\nAccess-Control-Allow-Origin: https://passwordstate.domain.com

Once added to the gateway.conf file, you will need to restart the Passwordstate-Gateway Windows Service