DEV Community

Steve Mak
Steve Mak

Posted on • Updated on

How to remove IIS server information from the response header?

#howto #iis #remove #header

How to remove IIS server information from the response header?

(Tested on IIS 10.0, ASP.NET MVC 5)

Add/Edit three lines of code in web.config as below

Line 1

<httpRuntime targetFramework="4.7.2" enableVersionHeader="false" />
Enter fullscreen mode Exit fullscreen mode

Line 2

<remove name="X-Powered-By" />
Enter fullscreen mode Exit fullscreen mode

Line 3

<requestFiltering removeServerHeader="true" />
Enter fullscreen mode Exit fullscreen mode

Overview 

...
<system.web>
    <compilation debug="true" targetFramework="4.7.2" />
    <httpRuntime targetFramework="4.7.2" enableVersionHeader="false" />
</system.web>
<system.webServer>
    <httpProtocol>
        <customHeaders>
            <remove name="X-Powered-By" />
        </customHeaders>
    </httpProtocol>
    <security>
        <requestFiltering removeServerHeader="true" />
    </security>
</system.webServer>
...
Enter fullscreen mode Exit fullscreen mode

Top comments (0)

Read next

onticdani profile image

My Docker stack to deploy a Django + Celery web app

Daniel -

mythiliraju profile image

60 Test Case Examples for HealthCare Domain Testing

MythiliRaju -

andylarkin677 profile image

Reddit CPO talks new features — better translations, moderation and dev tools

Andy Larkin -

karakhanyans profile image

Zero-Downtime Deployment with Laravel Forge

Serg -