Remove response headers

app.js

@@ -17,6 +17,7 @@ const mode = config.get('CRAWLER_MODE') || '';
 const service = CrawlerFactory.createService(mode);
 const app = express();
 
+app.disable('x-powered-by');
 app.use(logger('dev'));
 app.use(sendHelper());
 

web.config

@@ -38,13 +38,19 @@
 
     <!-- 'bin' directory has no special meaning in node.js and apps can be placed in it -->
     <security>
-      <requestFiltering>
+      <requestFiltering removeServerHeader="true">
         <hiddenSegments>
           <remove segment="bin"/>
         </hiddenSegments>
       </requestFiltering>
     </security>
 
+    <httpProtocol>
+      <customHeaders>
+        <remove name="X-Powered-By" />
+      </customHeaders>
+    </httpProtocol>
+
     <!-- Make sure error responses are left untouched -->
     <httpErrors existingResponse="PassThrough" />