Technical instruction - Add http response header on IIS

1. Run IIS and click on default website. On right hand site double click to http response header.

Open

2. Click add to add a http header.

Open

3. add the name in the name field and add value in the value filed.
   
   

   <add name="X-Frame-Options" value="SAMEORIGIN" /> <add name="X-Content-Type-Options" value="nosniff" /> <add name="Referrer-Policy" value="no-referrer-when-downgrade" /> <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" /> <add name="Permissions-Policy" value="geolocation=(*)" /> IF customer has strict policy: <add name"Content-Security-Policy" value"default-src 'self'; font-src 'self'; img-src 'self' data:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.adyen.com; style-src 'self' https://*.adyen.com;" /> IF customer does not have strict policy: <add name"Content-Security-Policy" value" default-src *; font-src 'self' 'unsafe-inline';img-src * data:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.adyen.com 'unsafe-inline' ; style-src 'self' https://*.adyen.com 'unsafe-inline';" />

Example:

4. Save and restart IIS. Remember to comment out any header set in AssertWeb\web.config.