My Oracle Support Banner

Controlling the Server Header with Oracle HTTP Server and Oracle Web Cache (Doc ID 396604.1)

Last updated on NOVEMBER 05, 2021

Applies to:

Web Cache - Version 9.0.4 and later
Oracle HTTP Server - Version 9.0.4.0 and later
Information in this document applies to any platform.

Goal

The majority of Web Servers (whether Oracle or non-Oracle) return HTTP Header information by default, which includes information about the vendor and version.

Example "Server:" header returned by Oracle Application Server 10g Release 2 Oracle HTTP Server:

 

 

There are various utilities available on the internet and within browsers that collect header details.

This "Server:" header information returned by Oracle HTTP Server or Oracle Web Cache may be removed or edited with a separate configuration in each component. This document will show how to configure the removal or editing of the "Server:" header.

Within the same area of concern is the ServerSignature directive, which is not passed in the headers but server information is provided to clients requesting server-generated pages. This may not be desired in all circumstances.

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
 Server Header for Oracle HTTP Server 12c Release 2 (12.2.1)
 Server Header for Oracle HTTP Server 12c Release 1 (12.1.2/12.1.3)
 Server Header for Oracle HTTP Server 11g (11.1.1)
 Server Header for Oracle HTTP Server 10g (10.1.2/10.1.3)
 Server Header for Oracle Web Cache 11g (11.1.1)
 Server Header for Oracle Web Cache 10g (10.1.2)
 Oracle Application Server 10g Release 1 (9.0.4)
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.