Forum Discussion

19873306's avatar
19873306
Copper Contributor
Sep 21, 2020

SQL server reporting services 2019 and HSTS headers

Apologies if this is not the correct section to post.

We have SQL Server and SQL Server Reporting Services 2019 installed on a server.  

Per this article, we should be able to modify the custom headers property to enable HSTS

https://docs.microsoft.com/en-us/sql/reporting-services/tools/server-properties-advanced-page-reporting-services?view=sql-server-ver15

 

What custom header should be used for HSTS to be included in the header for all reports / sites?

 

I tried 

<CustomHeaders>
<Header>
<Name>Strict-Transport-Security</Name>
<Pattern>\/Reports\*</Pattern>
<Value>max-age=86400</Value>
</Header>
<Header>
<Name>Embed</Name>
<Pattern>(.+)(*)(.+)(rs:embed=true)</Pattern>
<Value>True</Value>
</Header>
</CustomHeaders>

 

But this did not seem to work.  

No RepliesBe the first to reply

Resources