(转) IIS隐藏响应头信息

先安装url-rewrite组件
http://www.iis.net/downloads/microsoft/url-rewrite

修改应用根目录下的Web.config配置文件

<configuration>
...
  <system.webServer>
  ...
        <httpProtocol>
            <customHeaders>
                <remove name="X-Powered-By" />
            </customHeaders>
        </httpProtocol>
        <rewrite>
          <outboundRules rewriteBeforeCache="true">
            <rule name="Remove Server header">
              <match serverVariable="RESPONSE_Server" pattern=".+" />
              <action type="Rewrite" value="Apache" />
            </rule>
          </outboundRules>
        </rewrite>
  </system.webServer>
</configuration>

隐藏X-AspNet-Version

<configuration>
...
  <system.web>
    <compilation targetFramework="4.6.1" />
    <httpRuntime enableVersionHeader="false" />
    <!--httpRuntime targetFramework="4.6.1" maxRequestLength="40960" /-->
  </system.web>
</configuration>

删除X-AspNetMvc-Version

在Global.asax的Application_Start事件中将MvcHandler类的DisableMvcResponseHeader属性设置为True
MvcHandler.DisableMvcResponseHeader = True

删除X-Powered-By

IIS8中移除X-Powered-By HTTP头的步骤:

1 打开IIS管理器
  2 展开 网站 选择对应的项目并双击 HTTP响应标头
  3 删除相应的头信息

转自：https://www.cnblogs.com/cpw6/p/15767703.html

参考内容：https://github.com/dionach/StripHeaders