HTTP headers enable the client and server to exchange additional information within an HTTP request or response. Currently, custom headers are intercepted by nlsrvmod Apache module and stripped. I submitted an enhancement request to implement this feature back in March 2023, and it is now scheduled for inclusion in a forthcoming release, version 7.4, identifiable by the improvement reference "NEO-57557."
In the following example, you can observe that we are making an HTTP call to our custom JSSP page with a customized "Authorization" header, which subsequently gets removed.