---
title: "Adding Custom HTTP Headers to a Decisions Installation"
slug: "adding-custom-http-headers-to-a-self-hosted-installation"
updated: 2024-07-24T14:39:47Z
published: 2024-07-24T14:39:47Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding Custom HTTP Headers to a Decisions Installation

## Overview

As a method of passing additional information through a server, **Administrators**may wish to add custom **HTTP****Headers**to their environment. In doing so, users may add additional security parameters and authentication measures to their environments.

Use CasePassing additional security requirements via **HTTP****Headers**into a Decisions environment can help prevent issues such as click-jacking or accidental script runs. 

As the method of adding HTTP Headers to a v7 Installation is the same, regardless of Installation type (ie. **Self-Hosted** or **IIS**), the following document demonstrates how to add custom HTTP Headers to a Decisions Installation.

Additional Resources For a list of common **HTTP****Headers**and their functions, see [HTTP headers - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers).

---

## Example

To add custom **HTTP****Headers**to a **Self-Hosted** or **IIS****Installation**:

1. From the **Local****File****System**, navigate to **C:\Program Files\Decisions\Decisions Server**.
2. Open **Settings.xml** with the desired **Text****Editor**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-11-12_12h11_54.png)
3. Before the closing **</Settings>**tag, add the following code snippet:

```powershell
<CustomHeaders><CustomHeader> 
<Name>X-Frame-Options</Name> 
<Value>SAMEORIGIN</Value> 
</CustomHeader> 
<CustomHeader> 
<Name>X-XSS-Protection</Name> 
<Value>VALUE</Value> 
</CustomHeader> 
<CustomHeader> 
<Name>X-Content-Type-Options</Name> <Value>VALUE</Value> </CustomHeader> </CustomHeaders>
```

![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-11-12_12h20_56.png)
4. **Save**and close the Settings file.
5. [Restart](https://documentation.decisions.com/v9/docs/restart-decisions-application)the Decisions environment.