@Override
  protected void processConfig(Configuration configuration) {
    setSslEnabled(configuration.getApiSSLAuthentication());
    setStrictTransportSecurity(configuration.getStrictTransportSecurityHTTPResponseHeader());
    setxFrameOptionsHeader(configuration.getXFrameOptionsHTTPResponseHeader());
    setxXSSProtectionHeader(configuration.getXXSSProtectionHTTPResponseHeader());
    setContentSecurityPolicyHeader(configuration.getContentSecurityPolicyHTTPResponseHeader());
    setXContentTypeHeader(configuration.getXContentTypeHTTPResponseHeader());
    setCacheControlHeader(configuration.getCacheControlHTTPResponseHeader());
    setPragmaHeader(configuration.getPragmaHTTPResponseHeader());
    setCharset(configuration.getCharsetHTTPResponseHeader());
  }
AmbariServerSecurityHeaderFilter adds security-related headers to HTTP response messages for Ambari Server UI
ambari-server/src/main/java/org/apache/ambari/server/security/AmbariServerSecurityHeaderFilter.java