Delivering solid user friendly software solutions since the dawn of time.

Removing X-Powered-By ASP.Net and other version headers

Categories: .Net IIS

Most likely you do not want these headers to be displayed in your responses:

  • Server Microsoft-IIS/7.5
  • X-AspNetMvc-Version 3.0
  • X-AspNet-Version 4.0.303319
  • X-Powered-By ASP.NET

Removing X-AspNet-Version

In web.config add this:

<httpRuntime enableVersionHeader="false"/>

Removing X-AspNetMvc-Version

In Global.asax.cs add this line:

protected void Application_Start()
MvcHandler.DisableMvcResponseHeader = true;

Removing or changing Server

In Global.asax.cs add this:

protected void Application_PreSendRequestHeaders()
Response.Headers.Remove("X-AspNet-Version"); //alternative to above solution
Response.Headers.Remove("X-AspNetMvc-Version"); //alternative to above solution

Removing or changing X-Powered-By

IIS 7 - You can also remove the X-Powered-By header by including these lines to the <system.webServer> element:

<remove name="X-Powered-By" />

or manually go to IIS7 Management Console and open HTTP Response Headers