D7 - Remove Meta Tag Generator

Wow just saw that meta tag, not sure why they are forcing users to have a generator tag. I'll be removing that for sure.

It's in includes/common.inc line 320-328

Here's what I did, not sure if it's the correct way but it worked.

removed these two lines by putting //

//      'name' => 'Generator',
//      'content' => 'Drupal ' . $version . ' (http://drupal.org)',

And then removed ['#attributes']['content'] from this line.

  $elements['system_meta_generator']['#attached']['drupal_add_http_header'][] = array('X-Generator', $elements['system_meta_generator']['#attributes']['content']);

Put inside your theme template.php, this way you don't have to mess with core files.

// remove a tag from the head for Drupal 7
function YOURTHEME_html_head_alter(&$head_elements) {
  unset($head_elements['system_meta_generator']);
}

You can also do it through your Apache configuration. Just put this directive in your .htaccess file (or httpd.conf):

<IfModule mod_headers.c>
     Header unset X-Generator
     Header unset X-Drupal-Cache
     Header unset X-Powered-By
</IfModule>

I also generally remove X-Drupal-Cache, to avoid further announcements that this is Drupal, and also X-Powered-By so that people don't look for PHP vulnerabilities. If you have access to your own php.ini file, you can do this globally by adding the setting:

expose_php = Off

If you want to get even fancier, you can hide a lot of apache information with these other options:

ServerSignature Off
ServerTokens Prod

That will ensure that you don't broadcast your version of Apache. None of these make you super secure, but they do avoid scripts that go through headers looking for vulnerable versions of Apache, Drupal or whatever.

Can someone share with me why it is such a bad idea to include the meta tag for generator and attribute it to Drupal?

When looking for ways to remove the meta generator I came by this discussion about adding the meta generator. The developers choose not to include a setting since it would add complexity to the user interface. Since it is easy to delete the meta generator it becomes a choice for themers to delete it.

http://drupal.org/node/275092

How do i remove from Blog post

I tried all the solution but not able remove from blog post when try to create new blog i see the same
"meta name="generator" content="Drupal 7 (http://drupal.org)"

Pls help..

I think you are looking to unset the metatag_generator based upon dpm.

function YOURTHEME_html_head_alter(&$head_elements) {
  dpm($head_elements);
  unset($head_elements['metatag_generator']);
}

This worked for me...system_meta_generator did not.

Exists a module : http://drupal.org/project/remove_generator

Worked great.

I understand that this particular question is regarding D7, however, I searched for the same technique for D8 and came up short.

Here is the D8 way to accomplish this for those who find themselves looking for the answer to no avail.

In the "THEMENAME.theme" file of in the base of your theme put this:

/**
 * Removes the Generator Meta Tag from Drupal 8
 */
function THEME_page_attachments_alter(array &$attachments) {
    unset($attachments['#attached']['html_head'][1][0]);
}

Obviously change THEME to match your theme name.

* D8 may have some proper way of removing it but I'm barely 3 months into learning Drupal and only on version 8.
** Please be gentle if I've not place this in a correct place as this is my first time posting on here.

Hopefully this helps some future reader.

Come-on guys what so bad and difficult about it? It can easily be removed by the following settings, no need of any custom module or script.
Go Config > metatags > global edit > advance > Generator.
Just empty text in generator input box and the generator meta tag will completely disappear from the header, because once the string is empty the Drupal will not output the whole meta tag at all.

Use following function in your theme/template.php file

function yourtheme_html_head_alter(&$head_elements) {
  unset($head_elements['system_meta_generator']);
}

It will not generate
in web page.

Thanks all for this useful discussion on removing the meta generator tag.

The suggestion to also unset X-Drupal-Cache header leaves me a bit confused. Isn't this needed for drupal cache to work and for vanish to work?

If you use the metatag module you can overwrite the generator metatag with whatever you want very easily, as you add in all the other metatags you'll want to maximize your SEO.

Go the the the metatag module settings to got - global metatags - advanced tags. The generator tag is there.