Skip to main content
Showing results for 
Search instead for 
Did you mean: 

Earn a 50% discount on the DP-600 certification exam by completing the Fabric 30 Days to Learn It challenge.

New Member

Power Bi Report Server Security issues

We have 3 main security issues that need support to fix as follows:

 - Missing security headers :
  Best practice measures recommend the implementation of the following headers to aid in strengthening user protection within modern browsers:
1. X-Frame-Options
2. X-Xss-Protection
3. Strict-Transport-Security
4. X-Content-Length
5. Content-Security-Policy


-Server Fingerprinting:

The application responses expose information about the server. This will help the threat actor to find known vulnerabilities.

Recommendation: Any information that could indicate the back-end technologies should be removed or modified. Please disable "Server" in response headers.


-Missing HTTP Only and Secure Flags

The application uses several cookies missing one or more cookie security flags such as HTTP only and secure. Cookie flags must be set appropriately to avoid compromise of user session cookies.

Recommendation: Ensure that cookies have only HTTP and secure, flags set.


kindly we need step by step guide to fix the above issues 


Helpful resources

RTI Forums Carousel3

New forum boards available in Real-Time Intelligence.

Ask questions in Eventhouse and KQL, Eventstream, and Reflex.


Fabric certifications survey

Certification feedback opportunity for the community.