asafaweb Excessive headers fixes

gistfile1.txt

//On start up :
MvcHandler.DisableMvcResponseHeader = true;


// as an http module/global asax
protected void Application_PreSendRequestHeaders(object sender, EventArgs e)
{
	// Remove the "Server" HTTP Header from response - security review recommends against sending this
	var app = sender as HttpApplication;
	if (app == null || null == app.Context) return;
	var headers = app.Context.Response.Headers;
	headers.Remove("Server");
}

<system.web>
    <httpRuntime enableVersionHeader="false" />
 ...
 
  <system.webServer>
    <httpProtocol>
      <customHeaders>
        <!-- as recommended by secuirty audit-->
        <remove name="X-Powered-By" />
      </customHeaders>
    </httpProtocol>