QlikView allows for the use of custom HTTP headers.
From version 12.30 onwards, this can be configured with the QlikView Web Server (see QlikView WebServer: Custom HTTP Header). For any previous versions, Microsoft IIS is required.
HTTP headers are used to utilize inbuilt browser features or other use cases for unique environments. These headers could include and are not limited to X-XSS-Protection, Content-Type, X-Frame-Options ... etc
Environment:
QlikView
Microsoft IIS
The information in this article is provided as-is and to be used at your own discretion. Depending on tool(s) used, customization(s), and/or other factors ongoing support on the solution below may not be provided by Qlik Support.
Using Microsoft IIS to set custom HTTP headers
This article assumes that Microsoft IIS is already installed and used as QlikView's webserver. For more information on how to install and configure IIS, see How to configure: QlikView and IIS.
Adding custom HTTP headers in IIS
- Navigate to IIS
- Go to Sites
- Select your Qlik Site (by default this is the Default Web Site)
- Open Custom HTTP Headers
![HTTP Resonse Headers.png HTTP Resonse Headers.png](https://community.qlik.com/t5/image/serverpage/image-id/60056i4585F60584A44252/image-dimensions/652x478?v=v2)
- Click Add... in the top right Actions menu
![HTTP Response Header ADD.png HTTP Response Header ADD.png](https://community.qlik.com/t5/image/serverpage/image-id/60057i8CF3D903C56DF920/image-size/large?v=v2&px=999)
- Add your required custom header.
In this example, we used X-Frame-Options.
![HTTP Response Header ADD value.png HTTP Response Header ADD value.png](https://community.qlik.com/t5/image/serverpage/image-id/60058iF9125AFA07CF123C/image-dimensions/417x247?v=v2)
- Click OK and then Apply
Verify the custom HTTP Header
Open a web browser and navigate to the AccessPoint.
Enable the browser debug tools and review the Response Headers. In our case, we are using Google Chrome. the Response headers are currently set, as shown in the below image.
![verify custome header in debug tool IIS.png verify custome header in debug tool IIS.png](https://community.qlik.com/t5/image/serverpage/image-id/60060i6FF9B2C6729651E2/image-size/large?v=v2&px=999)