title: Adding Content Security Policy to Azure Web APP
body: <p>I am trying to add a HSTS and X-XSS to my Web App. I have been testing using this:
  <a href="https://securityheaders.io" rel="nofollow noreferrer">https://securityheaders.io</a></p>
  <p>I have been using this link as a starting reference:</p>
  <p><a href="https://tomssl.com/2016/06/30/how-to-fix-the-http-response-headers-on-azure-web-apps-to-get-an-a-plus-on-securityheaders-io/" rel="nofollow noreferrer">https://tomssl.com/2016/06/30/how-to-fix-the-http-response-headers-on-azure-web-apps-to-get-an-a-plus-on-securityheaders-io/</a></p>
  <p>I add web.config file inside /site/wwwroot , i stop and start my web app , but it's look no effect ( i think that web.config is Not required )</p>
  <p>I have Linux web app (Slack : NodeJS)</p>
  <p>How would I accomplish this ?</p>
  <p>Thank You!</p>