Response Headers Allowed

It is a literal filter on the header names that are allowed to pass to the client in the HTTP response. Some headers, particularly those that affect functionality of an application like Set-Cookie and Content-Type, are not blocked by this HTTP profile option. Others, like Server and Date, can be blocked. It's also a whitelist option if a value is specified. If the field is left blank, all headers are allowed through. If header names are specified, ONLY those headers will pass (barring the functional headers). The text block takes multiple header names, space delimited.