Headers from CLI not sent on root site handler

[SJebasingh]

How to use webhook -header to enable XSS protection

[SJebasingh]

I tried to use as below and not working.

Webhook.exe - port 90 - header X-Frame-Options=SAMEORIGIN

When I tried to get headers using curl I'm not able to get those headers. I want to fix vulnerabilities.

Curl -lkL --verbose http://localhost:90

[moorereason]

Does it work if you use the response-headers setting in the config?

[SJebasingh]

Yes. It works however security scan is run on port and ip as below and not on with added hooks.

http://localhost:90

[moorereason]

BTW, a fix for this issue has been merged into the development branch.