From b3b26bd9f3291e6561e09d55f5d0e9866511919a Mon Sep 17 00:00:00 2001 From: Cristian Dean Date: Tue, 1 Oct 2019 12:35:32 -0300 Subject: [PATCH] Remove X-Powered-By header (#2605) --- src/core/server/app/index.ts | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/core/server/app/index.ts b/src/core/server/app/index.ts index f152edc51..a291f8db9 100644 --- a/src/core/server/app/index.ts +++ b/src/core/server/app/index.ts @@ -110,6 +110,8 @@ export const listenAndServe = ( function configureApplication(options: AppOptions) { const { parent } = options; + parent.disable("x-powered-by"); + // Trust the proxy in front of us, this will enable us to trust the fact that // SSL was terminated correctly. const trust = options.config.get("trust_proxy");