Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove 'sever' response header #175

Closed
abovedave opened this issue May 30, 2017 · 0 comments
Closed

Remove 'sever' response header #175

abovedave opened this issue May 30, 2017 · 0 comments
Assignees
@jimlambie
Labels
type: enhancement

Comments

@abovedave
Copy link
Contributor

Currently we're advertising in the response header server: DADI (Web), this is bad security practice, especially for our clients. Any in-progress security bugs could be used as exploits.

Remove instances of res.setHeader('Server', config.get('server.name'))
@abovedave abovedave changed the title Remove sever response header Remove 'sever' response header May 30, 2017
@abovedave abovedave self-assigned this May 30, 2017
@abovedave abovedave mentioned this issue May 30, 2017
Closed
6 tasks
@jimlambie jimlambie assigned jimlambie and unassigned abovedave May 31, 2017
@jimlambie jimlambie mentioned this issue May 31, 2017
Merged
@abovedave abovedave mentioned this issue Aug 8, 2017
Merged
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jimlambie jimlambie

Labels
type: enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@jimlambie @abovedave