how to remove X-Powered-By in ExpressJS [duplicate]

I want to remove X-Powered-By for Security,Save Bandwidth in ExpressJS(node.js). how to do it? it could be filter(app.use) ?

app.use(function(req,res,next_cb){ /* remove X-Powered-By header */ next_cb(); }

0

3 Answers

Don't remove it; ask Express not to generate it in the first place:

Go to your app.js and just after:

var app = express();

Add:

app.disable('x-powered-by');

7

The better way to do it is:

app.disable('x-powered-by');

You can also make a middleware to remove any header like so:

app.use(function (req, res, next) { res.removeHeader("X-Powered-By"); next();
});

See more info on how to remove a header:

5

Middleware snippet from: Can't get rid of header X-Powered-By:Express

function customHeaders( req, res, next ){ // Switch off the default 'X-Powered-By: Express' header app.disable( 'x-powered-by' ); // OR set your own header here res.setHeader( 'X-Powered-By', 'Awesome App v0.0.1' ); // .. other headers here next();
}
app.use( customHeaders );
// ... now your code goes here