ATLAS-2500: added additional headers in HTTP response

webapp/src/main/java/org/apache/atlas/web/filters/AtlasAuthenticationFilter.java

@@ -346,6 +346,9 @@ public class AtlasAuthenticationFilter extends AuthenticationFilter {
             HttpServletResponse httpResponse = (HttpServletResponse) response;
             AtlasResponseRequestWrapper responseWrapper = new AtlasResponseRequestWrapper(httpResponse);
             responseWrapper.setHeader("X-Frame-Options", "DENY");
+            responseWrapper.setHeader("X-Content-Type-Options", "nosniff");
+            responseWrapper.setHeader("X-XSS-Protection", "1; mode=block");
+            responseWrapper.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
 
             if (headerProperties != null) {
                 for (String headerKey : headerProperties.stringPropertyNames()) {

webapp/src/main/java/org/apache/atlas/web/filters/AtlasKnoxSSOAuthenticationFilter.java

@@ -137,6 +137,10 @@ public class AtlasKnoxSSOAuthenticationFilter implements Filter {
 
         AtlasResponseRequestWrapper responseWrapper = new AtlasResponseRequestWrapper(httpResponse);
         responseWrapper.setHeader("X-Frame-Options", "DENY");
+        responseWrapper.setHeader("X-Content-Type-Options", "nosniff");
+        responseWrapper.setHeader("X-XSS-Protection", "1; mode=block");
+        responseWrapper.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
+
 
         if (!ssoEnabled) {
             filterChain.doFilter(servletRequest, servletResponse);