Can't get rid of header X-Powered-By:Express
In Express >= 3.0.0rc5:
app.disable('x-powered-by');
Here is a simple middleware that removes the header in earlier versions of Express:
app.use(function (req, res, next) {
res.removeHeader("x-powered-by");
next();
});
Just to piggy-back on rjack's answer, you could also (optionally) just change (set) the X-powered-by header to something much cooler/custom like this:
app.use(function (req, res, next) {
res.header("X-powered-by", "Blood, sweat, and tears")
next()
})
As of Express v3.0.0rc5, support for disabling the X-Powered-By
header is built in:
var express = require('express');
var app = express();
app.disable('x-powered-by');