feat(indiekit): don’t send x-powered-by header

getindiekit · Apr 5, 2024 · b797b2b · b797b2b
1 parent 0e2fbcf
commit b797b2b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/packages/indiekit/config/express.js b/packages/indiekit/config/express.js
@@ -21,6 +21,9 @@ export const expressConfig = (indiekitConfig) => {
   // Enable reversed proxy connections
   app.enable("trust proxy");
 
+  // Don’t advertise server details
+  app.set("x-powered-by", false);
+
   // Body parsers
   app.use(express.json());
   app.use(express.urlencoded({ extended: true }));