Removing Server header from static content in IIS 7/8

后端 未结 5 1606
走了就别回头了
走了就别回头了 2021-02-01 15:53

As part of an effort to make our API and site more secure, I\'m removing headers that leak information about what the site is running.

Example before stripping headers:<

5条回答
  •  渐次进展
    2021-02-01 16:10

    The only one without an easy listed solution for was the "Server" header. I was able to remove it locally in IIS and in an Azure web site by adding this in the web.config

    
      
        
      
    
    

提交回复
热议问题