去除服务器的heder信息

https://www.cnblogs.com/felixnet/p/6344613.html

https://www.cnblogs.com/wintersun/archive/2011/08/07/2129942.html

直接在Global.asax.cs中操作无效，不知何原因，如下：

 protected void Application_PreSendRequestHeaders(object sender, EventArgs e)
        {
            //HttpApplication app = sender as HttpApplication;
            //if (app != null && app.Context != null)
            //{
            //   app.Context. Response.Headers.Remove("Server");
            //    app.Context.Response.Headers.Remove("X-Powered-By");
            //    // Response.Headers.Set("Server", "ooosss");
            //    // Response.AddHeader("Sample1", "Value1");
            //}
        }

经测试，按上面的链接，再写一个modle可以：

 public class mysvr : IHttpModule
    {
        public void Dispose()
        {
            //no code nescessary
        }

        public void Init(HttpApplication context)
        {
            context.PreSendRequestHeaders += new EventHandler(context_PreSendRequestHeaders);
        }

        void context_PreSendRequestHeaders(object sender, EventArgs e)
        {
            try
            {
                HttpApplication app = sender as HttpApplication;
                if (null != app && null != app.Request && !app.Request.IsLocal && null != app.Context && null != app.Context.Response)
                {
                    var headers = app.Context.Response.Headers;
                    if (null != headers)
                    {
                        headers.Remove("Server");
                        headers.Remove("X-Powered-By"); //这一条无效，需要在web.config中配置去除X-Powered-By
                    }
                }
            }
            catch (Exception ex)
            {
                //   Log.HandleException(ex);
            }

        }
    }

以下是web.config

   
     
     
   


 
   
     
       
       
     
   

   
     
     
   

   
        这引用前面写的module