iis - Why Server header in not getting removed from the response in 500 error? -
I recently scanned my application for vulnerability, minor improvements were received, but for one of them I have not tried hard to work yet, unable to recover My site throws a 500 error for some action and when I check the headers of that error, it names the server header named IIS 7.5. I have already used the URL rewrite rule, fix the registry, the URL scan thing, but it seems that nothing is working. How to fix it? If you mean the server HTTP header, which may be Microsoft-IIS / 7.5 will be set to something on the line, so the easiest way is to overwrite it with empty or custom values in IIS. You can completely delete it by creating your own HTTP modules. The following link discusses several times the methods that you can try: