Delete header in django rest framework response

Question

I'm trying to delete Server header from django rest framework response, but I didn't find an easy way, so I create a middleware to delete it.

This is my first try:

middleware.py

class RemoveHeaders(object):
    def process_response(self, request, response):
        response['Server'] = ''
        return response

This middleware works ok, but the problem is that it fills server header with empty string and not delete it. so I tried the next:

class RemoveHeaders(object):
    def process_response(self, request, response):
        del response['Server']
        return response

But It doesn't work. server header continues.

How can I delete server header?, or do you know another alternative? thanks

Updated, these are my middlewares, maybe someone is override server header, case it doesn't exist?

MIDDLEWARE_CLASSES = (
    'corsheaders.middleware.CorsMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.auth.middleware.SessionAuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
    'django.middleware.security.SecurityMiddleware',
    'my_api.middleware.RemoveHeaders'
)

@SHIVAMJINDAL, because it gives sensible information, for example: Server: WSGIServer/0.2 CPython/3.5.3 — Pablo Cesar Cordova Morales
– Pablo Cesar Cordova Morales, Commented May 23, 2018 at 17:35
This should be done in server config file imho. In example for nginx you should look for proxy_set_header — mariodev
– mariodev, Commented May 24, 2018 at 19:40

Patrik Beck · Accepted Answer · 2019-02-07 15:37:31Z

3

I just had the exact same problem. Your approach with

del response['Server']

Is correct!

However, you need to move your middleware to be the first. As other middlewares will add headers after the response is constructed, so the order of application is bottom-up. Your middleware has to be the first one to have the "last word".

answered Feb 7, 2019 at 15:37

Patrik Beck

2,5151 gold badge21 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Delete header in django rest framework response

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related