Controlling the Server Header with Oracle HTTP Server and Oracle Web Cache
(Doc ID 396604.1)
Last updated on NOVEMBER 02, 2023
Applies to:
Web Cache - Version 9.0.4 and later Oracle HTTP Server - Version 9.0.4.0 and later Information in this document applies to any platform.
Goal
The majority of Web Servers (whether Oracle or non-Oracle) return HTTP Header information by default, which includes information about the vendor and version.
Example "Server:" header returned by Oracle Application Server 10g Release 2 Oracle HTTP Server:
There are various utilities available on the internet and within browsers that collect header details.
This "Server:" header information returned by Oracle HTTP Server or Oracle Web Cache may be removed or edited with a separate configuration in each component. This document will show how to configure the removal or editing of the "Server:" header.
Within the same area of concern is the ServerSignature directive, which is not passed in the headers but server information is provided to clients requesting server-generated pages. This may not be desired in all circumstances.
Solution
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
