Technical instruction - Add http response header on IIS

1. Run IIS and click on default website. On right hand site double click to http response header.

2. Click add to add a http header.

3. add the name in the name field and add value in the value filed.
   

   <add name="X-Frame-Options" value="SAMEORIGIN" />
   <add name="X-Content-Type-Options" value="nosniff" />
   <add name="Referrer-Policy" value="no-referrer-when-downgrade" />
   <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains;  preload" />
   <add name="Permissions-Policy" value="geolocation=(*)" />

Example:

4. Save and restart IIS. But remember to comment out any header set in web.config.