remove header x-powered-by for WASA remediation (#480)

department-of-veterans-affairs · Dec 12, 2023 · 0133590 · 0133590
1 parent 6c94444
commit 0133590
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/app.js b/src/app.js
@@ -76,6 +76,7 @@ function runServer(argv) {
     .then(handleMetadata(argv))
     .then(() => {
       const app = express();
+      app.disable("x-powered-by");
       const httpServer = http.createServer(app);
       const spConfigs = { id_me: new SPConfig(argv) };
       strategies.set("id_me", createPassportStrategy(spConfigs.id_me));