In my case, I have Glassfish 3.1.1 / Mojarra 2.1.3
I can remove the X-Powered-By in the Glassfish Admin Console in the network listener (so that it does not show long text:
Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1.1 Java/Sun Microsystems Inc./1.6)
but it still shows (yes, twice):
X-Powered-By: JSF/2.0
X-Powered-By: JSF/2.0
I use Jersey and JAXB to expose some web services and deploy some servlets using the @WebServlet annotation, but I don't think they add anything.
It is not generated by mod_jk or Apache, because I get these headers even when directly connected to the application port (localhost: 8080)
Are there typical modules that will do this in Glassfish? How to remove these headers?
thanks