Remove response headers

microsoft · Apr 21, 2017 · ea683d8 · ea683d8
1 parent f615c79
commit ea683d8
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/app.js b/app.js
@@ -17,6 +17,7 @@ const mode = config.get('CRAWLER_MODE') || '';
 const service = CrawlerFactory.createService(mode);
 const app = express();
 
+app.disable('x-powered-by');
 app.use(logger('dev'));
 app.use(sendHelper());
 

diff --git a/web.config b/web.config
@@ -38,13 +38,19 @@
 
     <!-- 'bin' directory has no special meaning in node.js and apps can be placed in it -->
     <security>
-      <requestFiltering>
+      <requestFiltering removeServerHeader="true">
         <hiddenSegments>
           <remove segment="bin"/>
         </hiddenSegments>
       </requestFiltering>
     </security>
 
+    <httpProtocol>
+      <customHeaders>
+        <remove name="X-Powered-By" />
+      </customHeaders>
+    </httpProtocol>
+
     <!-- Make sure error responses are left untouched -->
     <httpErrors existingResponse="PassThrough" />