Customize X-Generated-By HTTP header

By default, Smartsite, Asp.Net and IIS send several HTTP headers with each response to the browser. Some of these HTTP headers contain product names and product versions. For security reasons you may want to disable or modify these HTTP headers. It will also save you some bandwidth.

X-Generated-By

You can configure the HTTP header X-Generated-By that Smartsite sends to the browser by adding the AppSetting "GeneratedByHttpHeader" to the Smartsite.config file. If the value of the "GeneratedByHttpHeader" is an empty string, the HTTP header is not send to the browser.

XML	Copy Code
<appSettings> ... <add key="GeneratedByHttpHeader" value="" /> </appSettings>

X-AspNet-Version

You can remove the Asp.Net HTTP header "X-AspNet-Version" by adding the following line to the Web.config file:

XML	Copy Code
<system.web>     ...     <httpRuntime enableVersionHeader="false" />

X-Powered-By

The IIS HTTP header "X-Powered-By" can be edited or removed from the IIS Manager. Select the site and choose the option "HTTP Response Headers" to edit or remove the HTTP header.

Alternatively this can be fixed in the web.config:

<system.webServer>
<httpProtocol>
    <customHeaders>
      <remove name="X-Powered-By" />
    </customHeaders>
  </httpProtocol>
</system.webServer> 

In IIS 10.0 the Server header can be suppressed from the web.config:

XML	Copy Code
<system.webServer> <security> <requestFiltering removeServerHeader="true"/> ...