IIS Rewrite rules to remove "server" and "x-powered-by" from response headers

web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
	<system.webServer>
		<rewrite>
			<outboundRules>
				<rule name="Remove Server">
					<match serverVariable="RESPONSE_Server" pattern=".+" />
					<action type="Rewrite" />
				</rule>
				<rule name="Remove Powered-By">
					<match serverVariable="RESPONSE_X-Powered-By" pattern=".+" />
					<action type="Rewrite" />
				</rule>
			</outboundRules>
		</rewrite>
	</system.web>
</configuration>