Removing Server Info from response header

Ronny

• August 05, 2020 06:46
• Edited

Hi Team,

Due to security reasons, I want to remove the server info that is shown in the Response header of my dashboard application URL that is being used with a .net application

Server: Microsoft-IIS/8.5

Currently, I have tried the following procedure to get rid of this header

Added a Global.asax in my dashboard application and mentioned the following code within it

<%@ Application CodeBehind="Global.asax.vb" Inherits="rdWeb.Global" %>
<script RunAt="server">
Sub Application_PreSendRequestHeaders()
Response.Headers.Remove("Server")
End Sub
</script>

 

Now the above procedure works for half of the dashboard calls and for other URLs it doesn't remove the server info from the URL link of static files like js and CSS files, and the link of files from the folder rddownload and rddatacache.

For these 4 URL link type, my above procedure is not working. So are there any settings that can be done for the same in the dashboard application. 

 

Thanks in Advance

 

 

 

 

 

 

 

0

• Official comment

  

  Natan Cohen

  • August 07, 2020 00:16

  Hi Anmol,

  This is a good question.  Looks like you've determined that stripping that response header from Global.asax does not affect static files, such as JS, CSS and XML files.  Have you looked into muting that response header from IIS?  If you click on the website in IIS that hosts your Logi app, you can enter the HTTP Response Headers area.  Let's start there and see what we find.

  Thanks,
  Natan
  Logi Support

Please sign in to leave a comment.