diff --git a/src/main/resources/application-dev.yaml b/src/main/resources/application-dev.yaml
index e7dc563c..3c83585d 100644
--- a/src/main/resources/application-dev.yaml
+++ b/src/main/resources/application-dev.yaml
@@ -18,6 +18,14 @@ sm4cbc:
 
 jetty:
   contextPath: /
+  # HTTP 与 HTTPS 均隐藏容器版本；安全漏洞仍需通过维护补丁修复。
+  httpConfig:
+    sendServerVersion: false
+  httpsConfig:
+    sendServerVersion: false
+  session:
+    cookie:
+      httponly: true
   threadpool:
     idleTimeout: 60000
     minThreads: 10