From f27a726a6e227a3169897fe41e867cb50397abe7 Mon Sep 17 00:00:00 2001 From: James Coxhead Date: Tue, 8 Dec 2015 21:19:41 +0000 Subject: [PATCH 1/2] Disabled the X-AspNetMvc-Version header --- src/Umbraco.Web/WebBootManager.cs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Umbraco.Web/WebBootManager.cs b/src/Umbraco.Web/WebBootManager.cs index baac1109e4..f84d204bb1 100644 --- a/src/Umbraco.Web/WebBootManager.cs +++ b/src/Umbraco.Web/WebBootManager.cs @@ -145,6 +145,8 @@ namespace Umbraco.Web }); ClientDependencySettings.Instance.MvcRendererCollection.Add(renderer); + // Disable the X-AspNetMvc-Version HTTP Header + MvcHandler.DisableMvcResponseHeader = true; InstallHelper insHelper = new InstallHelper(UmbracoContext.Current); insHelper.DeleteLegacyInstaller(); From 739ff33ce18e5e27c0824a9bf1f72cde56a87302 Mon Sep 17 00:00:00 2001 From: James Coxhead Date: Tue, 8 Dec 2015 21:44:40 +0000 Subject: [PATCH 2/2] Removed X-AspNet-Version and X-AspNetMvc-Version headers --- src/Umbraco.Web/UmbracoModule.cs | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/Umbraco.Web/UmbracoModule.cs b/src/Umbraco.Web/UmbracoModule.cs index a7c41ba90f..8e14975a93 100644 --- a/src/Umbraco.Web/UmbracoModule.cs +++ b/src/Umbraco.Web/UmbracoModule.cs @@ -490,6 +490,8 @@ namespace Umbraco.Web httpContext.Response.Headers.Remove("Server"); //this doesn't normally work since IIS sets it but we'll keep it here anyways. httpContext.Response.Headers.Remove("X-Powered-By"); + httpContext.Response.Headers.Remove("X-AspNet-Version"); + httpContext.Response.Headers.Remove("X-AspNetMvc-Version"); } catch (PlatformNotSupportedException ex) {