class Rack::SecureHeaders def initialize(app, options = {}) @app, @options = app, options end def call(env) response = @app.call(env) # [status, headers, response] = response # Uncomment any of the following that make sense for your application: # response[1].delete "X-Runtime" # response[1].delete "Server" # response[1].delete "X-Rack-Cache" response end end # MyApp::Application.configure do # config.middleware.insert_after(Rack::Lock, Rack::SecureHeaders) # end