Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Hide server-side technology information from the browser

I have installed Wappalyzer add-on installed for Firefox browser. When I access my web application, it displays server-side technologies used. In this case it displays following information:

  • Node.js (Programming language)
  • Express (Web framework)
  • Connect (Web framework)

I need to somehow hide these information from the browser/client for security purpose. So, could anyone shed some light on how I do this in node.js. Is there any configuration settings that I can change so that they won't send unnecessary information to the browser/client.

Update:

I used following code to prevent Express framework from sending 'x-powered-by' header:

app.disable('x-powered-by');

Even after this change, the server side stack information is being displayed.

Thanks.

like image 564
sunilkumarba Avatar asked Feb 25 '14 19:02

sunilkumarba


People also ask

How do I use Wappalyzer?

Usage: To use Wappalyzer is very simple and easy, just search any website you want and simply hover over the Wappalyzer extension icon, click on it, and voila, you have the information you need.


1 Answers

Finally its working. The app.disable('x-powered-by') did the trick. After clearing the cache Wappalyzer was not able to determine the server-side stack information.

like image 57
sunilkumarba Avatar answered Sep 28 '22 01:09

sunilkumarba