Suggest an Idea

[gwenstamp125]

As of today it is not possible for the QMC to adjust the X-Frame-Options in the http header.
This leads to vulnerability possibilities with e.g. clickjacking.
We need a setting in the QVManagementService.exe.config or a xml config file to add additional response headers.

E.g.
X-Frame-Options: SAMEORIGIN
As seen in article https://support.qlik.com/articles/000022197

This is possible in Qlik Sense (virtual proxy advanced configuration) as in Qlikview webserver using this way https://support.qlik.com/articles/000094340 or a standalone IIS, but it’s not available for the QMC part of Qlikview.

[Ian_Crosland]

Thank you for your feedback on ways to improve our product. While this is something we understand would be useful, it's not on the short-term roadmap. Please continue to show your support for by voting for this idea.

Thanks,

Ian

[Meghann_MacDonald]

From now on, please track this idea from the Ideation portal. 

Link to new idea

Meghann

NOTE: Upon clicking this link 2 tabs may open - please feel free to close the one with a login page. If you only see 1 tab with the login page, please try clicking this link first: Authenticate me! then try the link above again. Ensure pop-up blocker is off.