Solution

We provide the option to remove the values of all of the preceding headers based on the IIS server setting for Enable_IIS_Rewrites.

  • If Enable_IIS_Rewrites is set to 0, the values of the headers are removed.
  • If Enable_IIS_Rewrites is set to 1, the values of the headers are left intact.
WARNING
If you set Enable_IIS_Rewrites to 1, you must not allow the values of the preceding headers to be altered before the request reaches the IIS web server.
Previous pagePassword hashing
Next pageSecure cron PHP

Commerce