Request Header Or Cookie Too Large disclose on HTTP 494 responses


Kong version discloses on HTTP 494 responses (Server: kong/1.1.2).

Is possible to remove the Server Header from all responses (Check HTTP 494 Response PoC section to replicate the problem);


HTTP/1.1 494 
Date: Mon, 27 May 2019 16:57:00 GMT
Content-Type: application/json
Connection: close
Server: kong/1.1.2
Content-Length: 49

{"message":"Request Header Or Cookie Too Large"}


Remove server_tokens from the headers