Server leaks version information via `Server` HTTP response header

[dsotirho-ucsc]

ZAP scan finding
Severity: Low

The web/application server is leaking version information via the "Server" HTTP response Description header. Access to such information may facilitate attackers identifying other vulnerabilities your web/application server is subject to.

Examples:

• https://data.humancellatlas.org/
• https://data.humancellatlas.org/favicon.ico (404 page)

Solution:

Ensure that your web server, application server, load balancer, etc. is configured to suppress the "Server" header or provide generic details.

[NoopDog]

Looks like the best we can do on cloudfront is to set the header to blank. We can't remove it.
https://stackoverflow.com/questions/56710538/cloudfront-and-lambdaedge-remove-response-header

[NoopDog]

HI @dsotirho-ucsc the Server header is updated to be ".".

This ticket is ready to retest.

Thanks!

[NoopDog]

@dsotirho-ucsc checking you saw this is ready to test!