向浏览器隐藏服务器端技术信息

时间:2022-03-03 16:22:37

I have installed Wappalyzer add-on installed for Firefox browser. When I access my web application, it displays server-side technologies used. In this case it displays following information:

我已经为Firefox浏览器安装了Wappalyzer附加组件。当我访问我的web应用程序时,它显示使用的服务器端技术。在本例中,它显示如下信息:

  • Node.js (Programming language)
  • 节点。js(编程语言)
  • Express (Web framework)
  • 表达(Web框架)
  • Connect (Web framework)
  • 连接(Web框架)

I need to somehow hide these information from the browser/client for security purpose. So, could anyone shed some light on how I do this in node.js. Is there any configuration settings that I can change so that they won't send unnecessary information to the browser/client.

为了安全起见,我需要从浏览器/客户端隐藏这些信息。那么,有没有人能解释一下我在node.js中是如何做到这一点的呢?是否有任何配置设置我可以更改,以便他们不会向浏览器/客户端发送不必要的信息。

Update:

更新:

I used following code to prevent Express framework from sending 'x-powered-by' header:

我使用了以下代码来阻止Express framework发送“x-powered-by”标题:

app.disable('x-powered-by');

Even after this change, the server side stack information is being displayed.

即使在此更改之后,也会显示服务器端堆栈信息。

Thanks.

谢谢。

1 个解决方案

#1


3  

Finally its working. The app.disable('x-powered-by') did the trick. After clearing the cache Wappalyzer was not able to determine the server-side stack information.

最后它的工作。disable(x-powered-by)应用程序实现了这一点。清除缓存后,Wappalyzer无法确定服务器端堆栈信息。

#1


3  

Finally its working. The app.disable('x-powered-by') did the trick. After clearing the cache Wappalyzer was not able to determine the server-side stack information.

最后它的工作。disable(x-powered-by)应用程序实现了这一点。清除缓存后,Wappalyzer无法确定服务器端堆栈信息。