Disabling Server Header

[cemo]

Please provide an option to disable Server Header for Jetty.

HttpConfiguration httpConfig = new HttpConfiguration();
httpConfig.setSendServerVersion( false );

[snicoll]

Would #4461 help?

[philwebb]

Does the server header currently get written? Looking at the Jetty source it appears that sendXPoweredBy defaults to false.

[cemo]

@philwebb I was referring Server header in response.

...
Expires:0
Pragma:no-cache
Server:Jetty(9.2.z-SNAPSHOT)
X-Application-Application:8080

[cemo]

@snicoll This is helping to overwrite this value as far as I understand. But this does not help to disable completely.

[philwebb]

We should probably address this at the same time as #4461. Depending on what Tomcat/Undertow do we might also want to change the default.

[philwebb]

Unfortunately it doesn't look like it's possible to completely disable the header on Tomcat. See AbstractHttp11Processor for the relevant code.

I was originally thinking about supporting server.server-header= (i.e. an empty string) to disable the header but I'm not keen to introduce something that works differently across the servlet containers.

Is there any specific reason that you want to completely remove the header?