IIS隐藏响应头信息

修改Server

# 先安装url-rewrite组件
http://www.iis.net/downloads/microsoft/url-rewrite

# 修改应用根目录下的Web.config配置文件
<configuration>
...
  <system.webServer>
  ...
        <httpProtocol>
            <customHeaders>
                <remove name="X-Powered-By" />
            </customHeaders>
        </httpProtocol>
		<rewrite>    
		  <outboundRules rewriteBeforeCache="true">
			<rule name="Remove Server header">
			  <match serverVariable="RESPONSE_Server" pattern=".+" />
			  <action type="Rewrite" value="Apache" />
			</rule>
		  </outboundRules>
		</rewrite>
  </system.webServer>
</configuration>

隐藏X-AspNet-Version

<configuration>
...
  <system.web>
    <compilation targetFramework="4.6.1" />
	<httpRuntime enableVersionHeader="false" />
    <!--httpRuntime targetFramework="4.6.1" maxRequestLength="40960" /-->
  </system.web>
</configuration>

删除X-AspNetMvc-Version

在Global.asax的Application_Start事件中将MvcHandler类的DisableMvcResponseHeader属性设置为True
MvcHandler.DisableMvcResponseHeader = True

删除X-Powered-By

IIS8中移除X-Powered-By HTTP头的步骤:

  1 打开IIS管理器
  2 展开 网站 选择对应的项目并双击 HTTP响应标头
  3 删除相应的头信息