Install the online documentation
Use the steps the install the online documentation on a web server.
Web Server Security Header Examples
Shown below are brief examples of what to add for web server security headers. For fuller details and other security options to consider, consult your security administrators.
For Tomcat web server, add the following to the web.xml file and then restart the web server:
<filter>
<filter-name>httpHeaderSecurity</filter-name>
<filter-class>org.apache.catalina.filters.HttpHeaderSecurityFilter</filter-class>
<init-param>
<param-name>antiClickJackingOption</param-name>
<param-value>SAMEORIGIN</param-value>
</init-param>
<async-supported>true</async-supported>
</filter>
<filter-mapping>
<filter-name>httpHeaderSecurity</filter-name>
<url-pattern>/*</url-pattern>
</filter-mapping>
For IIS web server, add the following to the site's Web.config file and restart the web server:
<system.webServer>
...
<httpProtocol>
<customHeaders>
<add name="X-Frame-Options" value="sameorigin" />
</customHeaders>
</httpProtocol>
...
</system.webServer>
For Apache web server, add the following to the httpd.conf file and restart the web server:
Header always append X-Frame-Options DENY