Adding Custom HTTP Headers to a Decisions Installation

Overview

As a method of passing additional information through a server, Administrators may wish to add custom HTTP Headers to their environment. In doing so, users may add additional security parameters and authentication measures to their environments.

As the method of adding HTTP Headers to a v7 Installation is the same, regardless of Installation type (ie. Self-Hosted or IIS), the following document demonstrates how to add custom HTTP Headers to a Decisions Installation. 

Example

To add custom HTTP Headers to a Self-Hosted or IIS Installation:

1. From the Local File System, navigate to C:\Program Files\Decisions\Decisions Server. 
2. Open Settings.xml with the desired Text Editor. 
3. Before the closing </Settings>tag, add the following code snippet:

   <CustomHeaders><CustomHeader> 
   <Name>X-Frame-Options</Name> 
   <Value>SAMEORIGIN</Value> 
   </CustomHeader> 
   <CustomHeader> 
   <Name>X-XSS-Protection</Name> 
   <Value>VALUE</Value> 
   </CustomHeader> 
   <CustomHeader> 
   <Name>X-Content-Type-Options</Name> <Value>VALUE</Value> </CustomHeader> </CustomHeaders>

   

4. Save and close the Settings file.
   
   
5. Restart the Decisions environment.