[#7166] - Security Defect in Enterprise Jasper 6.2

Following security defects has been reported from appscan for Jasper reporting module.

1
Missing "X-XSS-Protection" header

major

2

Overly Permissive CORS Access Policy

major

3

Missing "Content-Security-Policy" header

major

4

Security Issues: Application Error

Critical

5

Missing "X-Content-Type-Options" header

major