Hi,

We have our own DNN module and page with this DNN module. 
We have traced HTTP response and have found that it contains Location HTTP response header, which we wanted to exclude from the HTTP response headers.

We have tried to remove that header programmatically within code behind of module (the View.ascx.cs), but at this header is not in the list of headers.
Probably, we should do it in some another stage of lifecycle.

So, the question is that is it possible to remove desired HTTP Response header (and any other headers) by using DNN settings or maybe there is some programmatic way?
And when this particular header adds to the list of headers?

Best Regards

Hi Cathal,

Thank you for the response.
I now how and for what Location header could be used, but my question not about that.

We have our own site hosted under DNN and we do not use that header.
We have load balancer and nodes behind that and Location HTTP response header contains internal IP address of node behind the load the balancer.
Such kind of exposing could be potential security vulnerability which we want to avoid.

Best Regards

no as any solution would break asp.net's functionality - I also find it hard to believe that pci compliance would want this as the location header is used for standard redirects - a quick google does not show any such requirement (https://www.google.co.uk/#q=pci+compl...) can you please point me in the direction of where this is required.

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US