Reputation: 2008
I am working with a classic asp application running on IIS7.5.
The requirements ask to remove all miscelaneous headers, including the "Server" header.
I have been able to remove all but that.
Does anyone have a method by which this can be done?
I saw one method which accommodates it via an installation of the MS urlScan addin, but I am looking to avoid this.
Upvotes: 1
Views: 2336
Reputation: 630
It is possible but not via code:
IIS7.x - via HttpModule
II6.0 - via URLscan (from microsoft)
http://technet.microsoft.com/en-us/security/cc242650.aspx
Upvotes: 1