How to remove ASP.Net MVC Default HTTP Headers?

by

X-Powered-By is a custom header in IIS. Since IIS 7, you can remove it by adding the following to your web.config:

<system.webServer>
  <httpProtocol>
    <customHeaders>
      <remove name="X-Powered-By" />
    </customHeaders>
  </httpProtocol>
</system.webServer>

This header can also be modified to your needs, for more information refer to http://www.iis.net/ConfigReference/system.webServer/httpProtocol/customHeaders

Add this to web.config to get rid of the X-AspNet-Version header:

<system.web>
  <httpRuntime enableVersionHeader="false" />
</system.web>

Finally, to remove X-AspNetMvc-Version, edit Global.asax.cs and add the following in the Application_Start event:

protected void Application_Start()
{
    MvcHandler.DisableMvcResponseHeader = true;
}

You can also modify headers at runtime via the Application_PreSendRequestHeaders event in Global.asax.cs. This is useful if your header values are dynamic:

protected void Application_PreSendRequestHeaders(object source, EventArgs e)
{
      Response.Headers.Remove("foo");
      Response.Headers.Add("bar", "quux");
}

More Related Contents:

  1. How to validate uploaded file in ASP.NET MVC?
  2. where is the best place to save images from users upload
  3. Customizing authorization in ASP.NET MVC
  4. What ‘sensitive information’ could be disclosed when setting JsonRequestBehavior to AllowGet
  5. “Security aware” action link?
  6. How to simulate Server.Transfer in ASP.NET MVC?
  7. Where should I do Injection with Ninject 2+ (and how do I arrange my Modules?)
  8. What is an MVC child action?
  9. Including an anchor tag in an ASP.NET MVC Html.ActionLink
  10. Asp.net MVC4: Authorize on both controller and action
  11. MVC3 unobtrusive validation group of inputs
  12. Combine ASP.Net MVC with WebForms
  13. Purpose of ActionName
  14. MVC Razor @foreach
  15. How to fix: Handler “PageHandlerFactory-Integrated” has a bad module “ManagedPipelineHandler” in its module list
  16. How to set ViewBag properties for all Views without using a base class for Controllers?
  17. ‘Microsoft.SqlServer.Types’ version 10 or higher could not be found on Azure
  18. Redirect / show view after generated file is dowloaded
  19. ASP.NET MVC – Custom validation message for value types
  20. ASP.NET MVC: Route with optional parameter, but if supplied, must match \d+
  21. Context.User.Identity.Name is null with SignalR 2.X.X. How to fix it?
  22. AllowAnonymous not working with Custom AuthorizationAttribute
  23. Validation does not work when I use Validator.TryValidateObject
  24. IIS hijacks CORS Preflight OPTIONS request
  25. How do I route a URL with a querystring in ASP.NET MVC?
  26. Is using ViewBag in MVC bad? [closed]
  27. Difference between CSRF and X-CSRF-Token
  28. EntityType ‘Category’ has no key defined. Define the key for this EntityType [duplicate]
  29. How Would I Change ASP.NET MVC Views Based on Device Type?
  30. Should I use AsyncController at ASP.NET MVC 4?

Leave a Comment