{"action":"created","issue":{"url":"https://api.github.com/repos/BEXIS2/Core/issues/1","repository_url":"https://api.github.com/repos/BEXIS2/Core","labels_url":"https://api.github.com/repos/BEXIS2/Core/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/BEXIS2/Core/issues/1/comments","events_url":"https://api.github.com/repos/BEXIS2/Core/issues/1/events","html_url":"https://github.com/BEXIS2/Core/issues/1","id":137211932,"number":1,"title":"Security enhancements","user":{"login":"a5a351e7","id":10687719,"avatar_url":"https://avatars.githubusercontent.com/u/10687719?v=3","gravatar_id":"","url":"https://api.github.com/users/a5a351e7","html_url":"https://github.com/a5a351e7","followers_url":"https://api.github.com/users/a5a351e7/followers","following_url":"https://api.github.com/users/a5a351e7/following{/other_user}","gists_url":"https://api.github.com/users/a5a351e7/gists{/gist_id}","starred_url":"https://api.github.com/users/a5a351e7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/a5a351e7/subscriptions","organizations_url":"https://api.github.com/users/a5a351e7/orgs","repos_url":"https://api.github.com/users/a5a351e7/repos","events_url":"https://api.github.com/users/a5a351e7/events{/privacy}","received_events_url":"https://api.github.com/users/a5a351e7/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-29T10:25:02Z","updated_at":"2016-03-24T14:30:29Z","closed_at":null,"body":"As default security sensitive data is provided in the answer section of the HTTP header by the MVC application e.g.:\r\n\r\n> Server: Microsoft-IIS/8.5\r\n> X-AspNet-Version: 4.0.30319\r\n> X-AspNetMvc-Version: 5.2\r\n> X-Powered-By: ASP.NET\r\n\r\nUsually it is possible to disable this headers in the server config, but not with the IIS (not really). For MVC applications you have to add some lines of config to your application config, check: [https://ict.ken.be/removing-x-powered-by-aspnet-and-other-version-headers](https://ict.ken.be/removing-x-powered-by-aspnet-and-other-version-headers)\r\n\r\nIn my opinion it is the best way to implement the header removing in the `Application_PreSendRequestHeaders()` method."},"comment":{"url":"https://api.github.com/repos/BEXIS2/Core/issues/comments/200863115","html_url":"https://github.com/BEXIS2/Core/issues/1#issuecomment-200863115","issue_url":"https://api.github.com/repos/BEXIS2/Core/issues/1","id":200863115,"user":{"login":"a5a351e7","id":10687719,"avatar_url":"https://avatars.githubusercontent.com/u/10687719?v=3","gravatar_id":"","url":"https://api.github.com/users/a5a351e7","html_url":"https://github.com/a5a351e7","followers_url":"https://api.github.com/users/a5a351e7/followers","following_url":"https://api.github.com/users/a5a351e7/following{/other_user}","gists_url":"https://api.github.com/users/a5a351e7/gists{/gist_id}","starred_url":"https://api.github.com/users/a5a351e7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/a5a351e7/subscriptions","organizations_url":"https://api.github.com/users/a5a351e7/orgs","repos_url":"https://api.github.com/users/a5a351e7/repos","events_url":"https://api.github.com/users/a5a351e7/events{/privacy}","received_events_url":"https://api.github.com/users/a5a351e7/received_events","type":"User","site_admin":false},"created_at":"2016-03-24T14:30:29Z","updated_at":"2016-03-24T14:30:29Z","body":"a possible solution is provided in pull #3 "}}