topic X-Content for Alteryx Server in Alteryx Server Discussions

X-Content for Alteryx Server

asma_rez — Thu, 26 Sep 2019 13:41:58 GMT

Hello Support

In IIS , we can edit the web.config IIS file and modify X-Content-Type-Options response HTTP ,is there any tips to do the same thing on the alteryx server for security issues?

Thanks

Re: X-Content for Alteryx Server

DiganP — Thu, 26 Sep 2019 20:27:10 GMT

@asma_rez

We use something called WCF (Windows Communication Foundation) which is a part of the .NET framework provided by Microsoft. It allows the Gallery to be a self-hosted web service. This means that it does not require IIS or some other web server. It just registers itself with the address they have specified in their Gallery base address and responds to web requests at that address.

You can find more than you probably ever wanted to know about WCF here: https://msdn.microsoft.com/en-us/library/ms731082(v=vs.110).aspx

Please look at this thread as it is a similar question.

Re: X-Content for Alteryx Server

SeanN — Fri, 27 Sep 2019 20:34:30 GMT

Hi @asma_rez

If I understand you correctly, you are asking to add a custom header to the server's replies? If so, you can edit your alteryx.config file (standard location is C:\Program Files\Alteryx\bin\config\alteryx.config). Find the section for httpHeaders and edit similar to:

  <httpHeaders>
    <header name="X-Content-Type-Options" value="nosniff" />
  </httpHeaders>