X-Content for Alteryx Server

[asma_rez]

Hello Support

In IIS  , we can edit the web.config IIS file and modify  X-Content-Type-Options response HTTP ,is there any tips to do the same thing on the alteryx server for security issues?

Thanks

[DiganP]

@asma_rez 

We use something called WCF (Windows Communication Foundation) which is a part of the .NET framework provided by Microsoft.  It allows the Gallery to be a self-hosted web service.  This means that it does not require IIS or some other web server.  It just registers itself with the address they have specified in their Gallery base address and responds to web requests at that address.

You can find more than you probably ever wanted to know about WCF here:  https://msdn.microsoft.com/en-us/library/ms731082(v=vs.110).aspx

Please look at this thread as it is a similar question.

[SeanN · Accepted solution]

Hi @asma_rez

If I understand you correctly, you are asking to add a custom header to the server's replies? If so, you can edit your alteryx.config file (standard location is C:\Program Files\Alteryx\bin\config\alteryx.config). Find the section for httpHeaders and edit similar to: 

  <httpHeaders>
    <header name="X-Content-Type-Options" value="nosniff" />
  </httpHeaders>