How can I suppress any product information in HTTP responses? Product information that helps identify the server implementation is normally conveyed to the client through the Server header of HTTP responses. An attacker may exploit this information if a given product is known to contain one or more security vulnerabilities. The Server response header may be suppressed by declaring a JVM system property with name product.name and setting its value to the empty string (""). |