Configure Standard .NET headers. Fixes #1237

Azure · Feb 20, 2019 · 88615cd · 88615cd
1 parent 196ae55
commit 88615cd
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/WebJobs.Script.WebHost/web.config b/src/WebJobs.Script.WebHost/web.config
@@ -9,8 +9,13 @@
       <add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified"/>
     </handlers>
     <aspNetCore processPath="%LAUNCHER_PATH%" arguments="%LAUNCHER_ARGS%" stdoutLogEnabled="false" />
+    <httpProtocol>
+      <customHeaders>
+        <remove name="X-Powered-By" />
+      </customHeaders>
+    </httpProtocol>
     <security>
-      <requestFiltering allowDoubleEscaping="true">
+      <requestFiltering allowDoubleEscaping="true" removeServerHeader="true">
         <requestLimits maxQueryString="4096" maxUrl="8192" maxAllowedContentLength="104857600"/>
       </requestFiltering>
     </security>