Hi reamon,
I agree with you that there is not a solution, and only is any temporary work-around.
I checked 2 server.cnf files from 9.8 and 10.7 installations.
And so far I have come to the conclusion that here we can get an answer only directly from the developers.
Judge for yourself what conclusions can be drawn on the basis of HTTP configurations:
9.8
watt.server.http.allowOptions=true
watt.server.http.authorizationEncoding=UTF-8
watt.server.http.header.useHttpOnly=true
watt.server.http.header.useSecure=true
watt.server.http.jsonFormat=parsed
watt.server.http.listRequestVars=asNeeded
watt.server.http.preserveUriReservedChars=true
watt.server.http.reauth.user-agent.list=Firefox;MSIE
watt.server.http.returnException=true
watt.server.http.securityRealm=Integration Server
watt.server.http.useAcceptHeader=true
watt.server.http.x-frame-options=SAMEORIGIN
watt.server.http.xmlFormat=node
watt.server.httplog=false
watt.server.new.http.session.context=false
10.7
http.Content-Security-Policy=none
watt.server.http.Strict-Transport-Security=none
watt.server.http.X-Content-Type-Options=none
watt.server.http.X-Permitted-Cross-Domain-Policies=
watt.server.http.X-XSS-Protection=none
watt.server.http.allowOptions=true
watt.server.http.authorizationEncoding=UTF-8
watt.server.http.forwardHeaders=true
watt.server.http.forwardableHeaders=x-request-id,x-b3-traceid,x-b3-spanid,x-b3-parentspanid,x-b3-sampled,x-b3-flags,x-ot-span-context
watt.server.http.header.sameSite=
watt.server.http.header.useHttpOnly=true
watt.server.http.header.useSecure=true
watt.server.http.interceptor.enabled=false
watt.server.http.interceptor.impl=
watt.server.http.interceptor.outbound.enabled=false
watt.server.http.interceptor.outbound.impl=
watt.server.http.interceptor.preprocess.sizeLimit=-1
watt.server.http.jsonFormat=parsed
watt.server.http.listRequestVars=asNeeded
watt.server.http.preserveUriReservedChars=true
watt.server.http.reauth.user-agent.list=Firefox;MSIE
watt.server.http.request.supportCompression=false
watt.server.http.response.supportCompression=false
watt.server.http.returnException=true
watt.server.http.securityRealm=Integration Server
watt.server.http.uriPath.decodePlus=true
watt.server.http.url.forbidCRLF=true
watt.server.http.useAcceptHeader=true
watt.server.http.x-frame-options=SAMEORIGIN
watt.server.http.xmlFormat=node
watt.server.httplog=false
new.http.session.context=false
Thanks and regards,
Boris