---
title: "Adding Custom HTTP Headers to a Decisions Installation"
slug: "adding-custom-http-headers-to-a-self-hosted-installation"
description: "Learn how administrators can add custom HTTP headers to pass information through a server and configure additional security and authentication measures."
updated: 2026-04-27T20:46:33Z
published: 2026-04-28T14:12:51Z
canonical: "documentation.decisions.com/adding-custom-http-headers-to-a-self-hosted-installation"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.decisions.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding Custom HTTP Headers to a Decisions Installation

## Overview

As a method of passing additional information through a server, **Administrators** may wish to add custom **HTTP** **Headers** to their environment. In doing so, users may add additional security parameters and authentication measures to their environments.

Use CasePassing additional security requirements via **HTTP** **Headers** into a Decisions environment can help prevent issues such as click-jacking or accidental script runs. 

As the method of adding HTTP Headers to a v7 Installation is the same, regardless of Installation type (ie. **Self-Hosted** or **IIS**), the following document demonstrates how to add custom HTTP Headers to a Decisions Installation.

Additional Resources For a list of common **HTTP** **Headers** and their functions, see [HTTP headers - HTTP | MDN](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers).

---

## Example

To add custom **HTTP** **Headers** to a **Self-Hosted** or **IIS** **Installation**:

1. From the **Local** **File** **System**, navigate to **C:\Program Files\Decisions\Decisions Server**.
2. Open **Settings.xml** with the desired **Text** **Editor**. ![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-11-12_12h11_54.png)
3. Before the closing **</Settings>**tag, add the following code snippet:

```powershell
<CustomHeaders><CustomHeader> 
<Name>X-Frame-Options</Name> 
<Value>SAMEORIGIN</Value> 
</CustomHeader> 
<CustomHeader> 
<Name>X-XSS-Protection</Name> 
<Value>VALUE</Value> 
</CustomHeader> 
<CustomHeader> 
<Name>X-Content-Type-Options</Name> <Value>VALUE</Value> </CustomHeader> </CustomHeaders>
```

![](https://cdn.document360.io/6ef8bcc1-6489-4486-9ad1-83acff7e5df0/Images/Documentation/2021-11-12_12h20_56.png)
4. **Save** and close the Settings file.
5. [Restart](https://documentation.decisions.com/version-10/docs/restart-decisions-application) the Decisions environment.