IIS利用web.config隐藏部分响应头信息_iis隐藏server

测试环境

IIS版本：IIS10

前提条件

已安装URL Rewrite模块

web.config设置

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
         <rewrite>
			 <outboundRules rewriteBeforeCache="true">
                <rule name="Remove Server header">
                    <match serverVariable="RESPONSE_SERVER" pattern=".+" />
                    <action type="Rewrite" value="" />
                </rule>
				<rule name="Remove X-POWERED-BY">
                    <match serverVariable="RESPONSE_X-POWERED-BY" pattern=".+" />
                    <action type="Rewrite" value="" />
                </rule>
                <rule name="Remove X-ASPNET-VERSION">
                    <match serverVariable="RESPONSE_X-ASPNET-VERSION" pattern=".+" />
                    <action type="Rewrite" value="" />
                </rule>
            </outboundRules>
        </rewrite>
    </system.webServer>
</configuration>
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

通过以上设置，可以把响应信息中的server,x-powered-by和x-aspnet-version设置为空，也可以通过更改value，设置为自定义值。