如何在ExpressJS中删除X-Powered-By

Question

我想在ExpressJS(node.js)中删除X-Powered-By for Security,Save Bandwidth.怎么做？它可能是过滤器(app.use)？

app.use(function(req,res,next_cb){ /* remove X-Powered-By header */ next_cb(); }

Answer 1

不要删除它; 要求Express不要首先生成它:

/sf/answers/873924971/

转到你的app.js,之后:

var app = express();

加:

app.disable('x-powered-by');

Answer 2

更好的方法是:

app.disable('x-powered-by');

你也可以制作一个中间件来删除任何标题,如下所示:

app.use(function (req, res, next) {
  res.removeHeader("X-Powered-By");
  next();
});

查看有关如何删除标题的更多信息:

http://nodejs.org/api/http.html#http_response_removeheader_name

Answer 3

中间件片段来自:无法摆脱标题X-Powered-By:Express

function customHeaders( req, res, next ){
  // Switch off the default 'X-Powered-By: Express' header
  app.disable( 'x-powered-by' );

  // OR set your own header here
  res.setHeader( 'X-Powered-By', 'Awesome App v0.0.1' );

  // .. other headers here

  next();
}

app.use( customHeaders );

// ... now your code goes here