JENKINS-56217: Add option to remove one or more HTTP headers from unauthorized responses. In particular, this feature can be used to remove the X-Jenkins version header.
Installation options
Using the CLI tool: jenkins-plugin-cli --plugins extended-security-settings:1.2
Add option to disable autocomplete of passwords in the signup and login forms.
Add option to enable sending the HTTP header X-XSS-Protection: 1; mode=block to enable automatic blocking of suspected cross-site scripting attacks by web browsers that support this feature.
Installation options
Using the CLI tool: jenkins-plugin-cli --plugins extended-security-settings:1.0