I have installed Wappalyzer add-on installed for Firefox browser. When I access my web application, it displays server-side technologies used. In this case it displays following information:
我已经为Firefox浏览器安装了Wappalyzer附加组件。当我访问我的web应用程序时,它显示使用的服务器端技术。在本例中,它显示如下信息:
- Node.js (Programming language)
- 节点。js(编程语言)
- Express (Web framework)
- 表达(Web框架)
- Connect (Web framework)
- 连接(Web框架)
I need to somehow hide these information from the browser/client for security purpose. So, could anyone shed some light on how I do this in node.js. Is there any configuration settings that I can change so that they won't send unnecessary information to the browser/client.
为了安全起见,我需要从浏览器/客户端隐藏这些信息。那么,有没有人能解释一下我在node.js中是如何做到这一点的呢?是否有任何配置设置我可以更改,以便他们不会向浏览器/客户端发送不必要的信息。
Update:
更新:
I used following code to prevent Express framework from sending 'x-powered-by' header:
我使用了以下代码来阻止Express framework发送“x-powered-by”标题:
app.disable('x-powered-by');
Even after this change, the server side stack information is being displayed.
即使在此更改之后,也会显示服务器端堆栈信息。
Thanks.
谢谢。
1 个解决方案
#1
3
Finally its working. The app.disable('x-powered-by') did the trick. After clearing the cache Wappalyzer was not able to determine the server-side stack information.
最后它的工作。disable(x-powered-by)应用程序实现了这一点。清除缓存后,Wappalyzer无法确定服务器端堆栈信息。
#1
3
Finally its working. The app.disable('x-powered-by') did the trick. After clearing the cache Wappalyzer was not able to determine the server-side stack information.
最后它的工作。disable(x-powered-by)应用程序实现了这一点。清除缓存后,Wappalyzer无法确定服务器端堆栈信息。