WCF：如何从WCF服务调用中删除HTTP标头，例如aspnet版本，服务器等

Question

I have requirement where in for security reason I am not supposed to disclose response headers like server, asp.net version etc.

How can I restrict these headers when calls are made for WCF services.

I have already tried the below config settings but works fine for aspx page calls but not for WCF service calls.

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <remove name="Server" />
        <remove name="X-Powered-By" />
        <remove name="X-AspNet-Version" />
      </customHeaders>
    </httpProtocol>
  </system.webServer>
</configuration>

Thanks, Mahantesh MB

Answer 1

You can go into IIS and select your Site where your webservice is running on, in the IIS section there is a button called HTTP Response Headers, click on it and remove the headers

following your comment you can try to add a message inspector

public class RemoveHeaders: IDispatchMessageInspector
{
    public object AfterReceiveRequest(ref Message request,
        IClientChannel channel, InstanceContext instanceContext)
    {
        return null;
    }

    public void BeforeSendReply(ref Message reply, object correlationState)
    {

        var httpCtx = HttpContext.Current;
        if (httpCtx != null)
        {
            httpCtx.Response.Headers.Remove(HttpResponseHeader.Server.ToString());
        }
    }
}