Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Modifying web.config

(0) ShareShare
ReportReport
Posted on by 60

Hello Experts,

Is it recommended to modify the web.config file of Microsoft Dynamics CRM? Our network infrastructure team has asked to modify the web.config file of CRM to avoid 'ClickJacking Vulnerability'. They have proposed to add "X-Frame Option Header" in the web.config file under <system.WebServer> tags wherever found. We can find the <system.WebServer> tag appearing many times in the web.config file but are reluctant to make changes to the web.config.

Can anyone suggest if it is recommended or not? Does Microsoft Dynamics CRM provide enough security to avoid 'ClickJacking Vulnerability'?

*This post is locked for comments

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Modifying web.config

    Hello,

    Is there a web.config for dynamics 365 online? The problem I am facing is that my entity primary keys contain colons and I cannot retrieve them via the GET method. Regards

  • Suggested answer
    Guido Preite Profile Picture
    Guido Preite 54,071 Super User 2024 Season 1 on at
    RE: Modifying web.config

    making changes to web.config is not supported

    by the way, a clickjacking vulnerability inside a CRM OnPremise can only be inserted voluntarily by a System Administrator/System Customizer (the roles they have the capacity to add jscript or iframes inside crm) so I don't think you need to update the web.config

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Announcing Forum Attachment Improvements!

We're excited to announce that attachments for replies in forums and improved…

Vahid Ghafarpour – Community Spotlight

We are excited to recognize Vahid Ghafarpour as our February 2025 Community…

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,965 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 230,836 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans