From 45c4c41059a54a3365fe18f685f19793a33811de Mon Sep 17 00:00:00 2001
From: jvoisin <jvoisin@users.noreply.github.com>
Date: Sat, 5 May 2018 03:04:30 +0000
Subject: [PATCH] Tighten a bit asp and iis detection (#2260)

- The x-powered-by header is trustworthy for ASP
- The `server` header for IIS always starts with `IIS`
---
 src/apps.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/apps.json b/src/apps.json
index fdf50967f..359609c8d 100644
--- a/src/apps.json
+++ b/src/apps.json
@@ -4343,7 +4343,7 @@
         22
       ],
       "headers": {
-        "Server": "IIS(?:/([\\d.]+))?\\;version:\\1"
+        "Server": "^IIS(?:/([\\d.]+))?\\;version:\\1"
       },
       "icon": "IIS.png",
       "implies": "Windows Server",
@@ -6019,7 +6019,7 @@
       },
       "headers": {
         "X-AspNet-Version": "(.+)\\;version:\\1",
-        "X-Powered-By": "ASP\\.NET\\;confidence:50"
+        "X-Powered-By": "^ASP\\.NET"
       },
       "html": "<input[^>]+name=\"__VIEWSTATE",
       "icon": "Microsoft ASP.NET.png",