Removing/Hiding/Disabling excessive HTTP response headers in Azure/IIS7 without UrlScan

后端 未结 5 771
长发绾君心
长发绾君心 2020-11-28 01:48

I need to remove excessive headers (primarily to pass penetration testing). I have spent time looking at solutions that involve running UrlScan, but these are cumbersome as

5条回答
  •  攒了一身酷
    2020-11-28 02:35

    MSDN published this article on how to hide headers on Azure Websites. You can now hide the server from web.config by adding an entry to system.webServer

    
          
    
    

    VS will frown at the above as invalid though. The above link has code as pics, hard to find. MVC version is still hidden in application start as above, same for x-powered-by and .Net version.

提交回复
热议问题