The Spotfire Server can be configured to include extra security-oriented HTTP headers in its responses.

The headers in this section are optional. The headers X-Content-Type-Options and the Content-Security-Policy are included by default.

Enable these headers only if you know how they work and you understand the effects they can have on your deployment.