Explicitly disable x-powered-by header

debugger22 · erikzaadi · Sep 30, 2016 · Sep 30, 2016 · Sep 30, 2016 · Sep 30, 2016
commit bc96573d8fa78c407dea7ad94c2a95d539f39719
diff --git a/server/index.js b/server/index.js
@@ -32,6 +32,12 @@ if(isDev)
 else
   logger.appStarted(port);
 
+// Apply security middlewares
+app.use(helmet());
+
+// Remove x-powered-by header
+app.disable('x-powered-by');
+
 // server static files
 app.use('/static', express.static('app'));
 
@@ -40,9 +46,6 @@ app.get('/', function (req, res) {
   res.sendFile(path.resolve('app/index.html'));
 });
 
-// Apply security middlewares
-app.use(helmet());
-
 // Set number of connected users to 0
 redis_client.set('connected_users', 0);