How to Hide the X-Powered-By Header in NestJS

While developing a backend application with NestJS, I noticed that the X-Powered-By: Express header appeared in the API responses during debugging. This can expose your technology stack to potential attackers.

To prevent this and enhance security, we need to hide the X-Powered-By header. Here’s how you can do it.

First, you should have the following code in your main file:

const app = await NestFactory.create(AppModule);

Next, import the necessary modules:

import { ExpressAdapter } from '@nestjs/platform-express';
import express from 'express'; …

api application attackers backend beginners can debugging expose express header hide nestjs prevent security stack technology webdev