Add security headers

[atomfrede]

Overview of the feature request

For the boot backend we set a bunch of headers (via spring security) to improve security (e.g. x-frame options). Currently we do not that here. We score F instead of A as we do for the boot backend. I guess the best way is to implement a custom filter (like the CorsFilter) and set the headers accordingly.

Motivation for or Use Case

Spring Boot

Micronaut

[atomfrede]

I guess the OncePerRequestFilter would be the way to go. Something like this?

@Filter
public class SecurityHeaderFilter extends OncePerRequestHttpServerFilter  {

    @Override
    protected Publisher<MutableHttpResponse<?>> doFilterOnce(HttpRequest<?> request, ServerFilterChain chain) {

        return Publishers.map(chain.proceed(request), mutableHttpResponse -> {
            mutableHttpResponse.header("X-Frame-Options", "DENY");
            return mutableHttpResponse;
        });
    }

}