Contents x
    Remove the HTTPAPI/2.0 header
    • 30 Oct 2023
    • 1 Minute to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    Remove the HTTPAPI/2.0 header

    • Updated on 30 Oct 2023
    • 1 Minute to read
    • Print
    • Dark
      Light
    • PDF
    Article Summary

    Liquit Workspace uses the HTTP.sys web server of the Microsoft Windows operating system for handling the incoming HTTP(s) requests.

    The web server will automatically add "server: Microsoft-HTTPAPI/2.0" to every response. As a security best practice, you should avoid incorporating server headers within the response payload.

    The HTTP.sys web server is used by multiple applications on the same server. For example, Microsoft IIS. The changes described below will affect any application that is using this web server.

    To remove the server header follow these steps:

    1. Navigate to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters registry key folder
    2. Create a registry key with the following properties:
    • Type REG_DWORD
    • Name DisableServerHeader
    • Value 2
    1. Reboot the server, so that your changes will take effect.

    For more information, see Microsoft documentation.

    Was this article helpful?
    What's Next