X-Powered-By header exposed

[dig]

Check out this thread @yudaadiitya as it covers the same topic

Server information and X-Powered-By header exposed

Hi, We have had a security report handed to us with some Medium risks and was wondering if these are: 1: actually required to change or just poor reporting and 2: if we can make these changes in a config/setting file or request for the update. HTTP Strict Transport Security (HSTS) not enforced - configure for HTTPS only Server information header exposed - solution to remove X-Powered-By header exposed - solution is to remove Regards