Missing Security element in browser Response Headers in PBIRS portal

Question

We have on-premise power bi report server installed in windows datacenter 2019 server.

We are missing some Reponse headers in the browser when report portal is inspected.

Under Web.config file in \Microsoft Power BI Report Server\PBIRS\ReportServerReportServer\ path

we have added this and restarted the service.

<system.webServer>

<httpProtocol>

  <customHeaders>

    <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" />

    <add name="Cache-Control" value="no-cache,no-store,must-revalidate" />

    <add name="X-Frame-Options" value="DENY" />

    <add name="X-XSS-Protection" value="1; mode=block" />

    <add name="X-Content-Type-Options" value="nosniff" />

    <add name="Pragma" value="no-cache" />

    <add name="Content-Security-Policy" value="default-src 'self';" />

  </customHeaders>

</httpProtocol>
```  </system.webServer>

 

But none of the custom headers appear in the browser reponse headers.

Is there a different way to achive this.?

Answer 1

Hi @Chandra Bhushan,

Please raise the issue to Power BI Community so that you could get more professional advice.

Power BI Community

Regards，

Zoe Hui

---

If the answer is helpful, please click "Accept Answer" and upvote it.