Hardening poorly configured services with Cloudflare workers
It seems that Azure is sending x-powered-by header from asp.net, and also the php version. Removing the asp.net header is easy with web.config changes, but the php is tricker. I decided to remove these unwanted header with cloudflare worker-script.
Here’s a simple workes which will remove the x-powered-by headers from your responses.
```
addEventListener('fetch', event => { event.respondWith(handleRequest(event.request)) }) /** * Respond to the request * @param {Request} request */ async function handleRequest(request) { const response = await fetch(request), newheaders = new Headers(response.headers); newheaders.delete("x-powered-by"); return new Response(response.body , { status: response.status, statusText: response.statusText, headers: newheaders }) } ```
This post is licensed under CC BY 4.0 by the author.