Question

I’ve developed a web application in Ruby (using Sinatra framework if that matters).

It adds a Server header to every HTTP response:

Server: WEBrick/1.3.1 (Ruby/1.9.3/2011-09-23)


How do I disable it?

Answer 1

I’m not sure that you can delete Server header at all without hacking the guts. I think that more simple is delete all content of this header such way:

require 'sinatra'

set :server, 'WEBrick'

get '/' do
  headers "Server" => ""
  "Hello, World!"
end

If you want to prepare this manipulation for each action, you can use before filter:

require 'sinatra'

set :server, 'WEBrick'

before do
  headers "Server" => ""
end

get '/' do
  "Hello, World!"
end