Is it necessary to strip these HTTP headers?

Evilginx
, , ,
1

These are the headers I am not sure whether I should strip:

X-Akamai-Transformed
X-Cache-Status
Pics-Label
P3P
X-Cache
X-Amz-Cf-Pop
X-Amz-Cf-ID
X-Goog-Stored-Content-Length
X-Goog-Stored-Content-Encoding
X-Goog-Storage-Class
X-Goog-Metageneration
X-Goog-Hash
X-Goog-Generation
Traceresponse
X-Permitted-Cross-Domain-Policies
X-XSS-Protection
X-Request-ID
Request-ID
etag
X-DNS-Prefetch-Control
X-AspNet-Version
X-Powered-By
Server
Public-Key-Pins
X-Client-Data
Via
Mnemonic
X-Cnection
X-Guploader-Uploadid
X-Forwarded-For
X-Real-IP
X-Forwarded-Host
X-Forwarded-Proto
Forwarded
CF-Connecting-IP
Referrer-Policy
Cache-Control

THIS IS HOW I STRIP HEADERS

  • {triggers_on: ‘’, orig_sub: ‘’, domain: ‘’, search: ‘Header: .*’, replace: ‘’, header: true, regexp: true}
2

not sure it really depends website to website .

for example some website dont even work if u block X-Forwarded-For and X-Forwarded-Host
so in that case u need to modify that haders value in source .|

so it depends on with which website u dealing with