Remove “Server” header from ASP.NET Core 2.1 application

by

This solution works on IIS 10+ version and allows to remove x-powered-by and server headers in server response.

In IIS 10 a new attribute was added: removeServerHeader.

We need to create web.config file in asp.net core application with following content:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.webServer>
    <security>
      <requestFiltering removeServerHeader="true" />
    </security>
    <httpProtocol>
      <customHeaders>
        <remove name="X-Powered-By" />
      </customHeaders>
    </httpProtocol>
  </system.webServer>
</configuration>

Then publish app and restart site on IIS.

More Related Contents:

  1. How to specify the view location in asp.net core mvc when using custom locations?
  2. Is Kestrel using a single thread for processing requests like Node.js?
  3. How to watch for file changes “dotnet watch” with Visual Studio ASP.NET Core
  4. Unable to configure HTTPS endpoint. No server certificate was specified, and the default developer certificate could not be found
  5. where to download the dotnet-dev-win-x86.1.0.0-preview 2-1-003180
  6. asp.net core web api published in IIS after moved to different IIS server pc gives error 500.19 (0x8007000d)
  7. How to run stored procedures in Entity Framework Core?
  8. Where are the Login and Register pages in an AspNet Core scaffolded app?
  9. Entity Framework Core service default lifetime
  10. why remove-migration run my app?
  11. How do I get the kestrel web server to listen to non-localhost requests?
  12. How to seed an Admin user in EF Core 2.1.0?
  13. What is Kestrel (vs IIS / Express)
  14. How to update the model when using database first approach
  15. AddDbContext or AddDbContextPool
  16. .NET Core vs ASP.NET Core
  17. How to set redirect_uri protocol to HTTPS in Azure Web Apps
  18. Get Current User in a Blazor component
  19. .Net Core on Raspberry Pi 4 with Raspbian?
  20. Identity in ASP.Net Core 2.1< - Customize AccountController
  21. ASP.NET Core support in Visual Studio 2015?
  22. How to correctly get dependent scoped services from ISecurityTokenValidator
  23. How to publish environment specific appsettings in .Net core app?
  24. Multipart body length limit exceeded exception
  25. .NET Core app unable to start in IIS due to ErrorCode = ‘0x80004005 : 80008083
  26. Configure cors to allow all subdomains using ASP.NET Core (Asp.net 5, MVC6, VNext)
  27. Read request body twice
  28. How to inject a reference to a specific IHostedService implementation?
  29. Store / Retrieve ConnectionString from appSettings.json in ASP.net Core 2 MVC app
  30. Disable chunking in ASP.NET Core

Leave a Comment