X-Powered-By keep showing when I leave it empty in config file

[bepsvpt]

X-Powered-By keep showing when I leave it empty in config file

[aesyondu]

Nvm, thanks @tobias-trozowski. In my case it was the php.ini

1. verify that expose_php is On

php -i | grep expose
# expose_php => On => On

2. set expose_php to Off in php.ini

expose_php => Off => Off

3. restart server and verify header is not shown

[tobias-trozowski]

not sure about your setup and i'm not a lara user but u might check https://www.php.net/manual/en/ini.core.php#ini.expose-php

[aesyondu]

I have the same issue. Have you found a workaround @hyquoccuong ?

composer.json (versions):

{
  "bepsvpt/secure-headers": "v6.3.0",
  "laravel/lumen-framework": "v5.8.13",
}

config/secure-headers.php

    /*
     * X-Powered-By
     *
     * Note: it will not add to response header if the value is empty string.
     */

    'x-powered-by' => '',

[bepsvpt]

Close due to inactive.