How to add additional response headers in Qlik SenseArticle Number: 000041085 | Last Modified: 2019/01/17
An example is the commonly deployed X-Frame-Options to prevent Clickjacking, or headers meant to prevent cross-site-scripting.
How to add additional headers:
- Inspect the Response Headers in the Hub for a specific Virtual Proxy to see what values are already present:
- In this example we are using Chrome's Developer Tools. All browsers include Developer Tools but Chrome's tends to be the most robust. You can access the browser's Developer's Tools by pressing F12. You may need to refresh the page to see a capture. Refer to online documentation for the browser of choice for insight into how to use its Developer Tools.
- Add the additional response headers in QMC. QMC > Virtual Proxies > Edit > Advanced > Additional Response headers:
- Note that the expected format is Header: option1;option2
- If there are multiple headers which need to be added, then each header needs to be on a new line in the expected format
- Be sure to research additional headers and understand the consequences of adding them to Qlik Sense. Some headers may have a large impact to a deployment; example: https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
- These headers are applied on a per virtual proxy basis. So be sure to apply any needed changes to all relevant virtual proxies.
Have a Question?
Search Qlik's Support Knowledge database or request assisted support for highly complex issues.Submit a case
Experiencing a serious issue, please contact us by phone. View phone numbers and hours by region.