Install the online documentation
Use the steps to install the online documentation on a web server.
Web Server Security Header Examples
Shown below are brief examples of what to add for web server security headers. For fuller details and other security options to consider, consult your security administrators.
For Tomcat web server, add this header to the web.xml file and then restart the web server:
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<init-param>
<param-name>antiClickJackingOption</param-name>
<param-value>SAMEORIGIN</param-value>
</init-param>
<async-supported>true</async-supported>
</filter>
<filter-mapping>
<filter-name>httpHeaderSecurity</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
For IIS web server, add this header to the site's Web.config file and restart the web server:
<system.webServer>
...
<httpProtocol>
<customHeaders>
<add name="X-Frame-Options" value="sameorigin" />
</customHeaders>
</httpProtocol>
...
</system.webServer>
For Apache web server, add this header to the httpd.conf file and restart the web server:
Header always append X-Frame-Options DENY