Back to Developer Roadmap

Remove Fingerprints

src/data/best-practices/api-security/content/remove-fingerprint-header.md

4.0287 B
Original Source

Remove Fingerprints

Remove fingerprinting headers (i.e. x-powered-by etc) from the HTTP request.

Fingerprinting headers can be used to identify the web server and its version. This information can be used by attackers to identify vulnerabilities in the web server and exploit them.