Remove sensitive Headers from Azure PaaS hosted Websites
问题 If you follow this article Azure Blog, you can remove the Server, X-Powered-By and MVC version which is great. You can also achieve similar with a custom IIS module with the following method: private void OnPreSendRequestHeaders(object sender, EventArgs e) { HttpContext.Current?.Response.Headers.Remove("Server"); HttpContext.Current?.Response.Headers.Remove("X-AspNet-Version"); HttpContext.Current?.Response.Headers.Remove("X-AspNetMvc-Version"); HttpContext.Current?.Response.Headers.Remove("X