Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
3 years ago
Solved

Add HTTP Strict transport security header

Hi folks,  I was told to add the HSTS header to the server but not sure how? I tried this tutorial but it didn't work: https://learn.microsoft.com/en-us/sql/reporting-services/tools/server-properti...
HSTS
  • d_gosbell's avatar
    d_gosbell
    3 years ago

    What regex pattern did you use for the HSTS header?

     

    I did a test matching anything under /Reports/ and it appeared to work fine (I also stopped and re-started PBIRS after changing this setting just to be sure it was applied)

     

    <Header>
           <Name>Strict-Transport-Security</Name>
           <Pattern>(.+)\/Reports\/(.+)</Pattern>
           <Value>max-age=86400; includeSubDomains=true</Value>
    </Header>

     

     

d_gosbell's avatar
d_gosbell
Super User
3 years ago

What regex pattern did you use for the HSTS header?

 

I did a test matching anything under /Reports/ and it appeared to work fine (I also stopped and re-started PBIRS after changing this setting just to be sure it was applied)

 

<Header>
       <Name>Strict-Transport-Security</Name>
       <Pattern>(.+)\/Reports\/(.+)</Pattern>
       <Value>max-age=86400; includeSubDomains=true</Value>
</Header>