GlassFish and Payara add their version to 'X-PoweredBy' response headers. To hide 'X-PowerdBy' header, you may use some way.
1. Set 'product.name' JVM property
Both GlassFish and Payara, you can override a content of 'X-PoweredBy' header to any text. Add following JVM properties;
-Dproduct.name=DummyServerName
2. Remove X-PoweredBy header
In case of Payara 4.173 or later, 'X-PoweredBy' header can also be switched of in the Admin Console under Network->Config->Protocols->HTTP-Listener->HTTP (tab) Sever Header field.
Add Comment
Comments
Please sign in to leave a comment.