Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Add the traceparent header #813

Closed
moxli opened this issue Jan 3, 2024 · 0 comments · Fixed by #817
Closed

Feature: Add the traceparent header #813

moxli opened this issue Jan 3, 2024 · 0 comments · Fixed by #817

Comments

@moxli
Copy link
Contributor

moxli commented Jan 3, 2024

Description

Nikto identifies the "traceparent" header as uncommon.

    "vulnerabilities": [
      {
        "id": "999100",
        "method": "GET",
        "msg": "Uncommon header 'traceparent' found, with contents: 00-be484f8b1ba6ea20ebb8819b6a7cfb72-5120fc279a175459-01.",
        "url": "/"
      }
    ]

The traceparent header is widely used by tracing systems to identify the incoming request and IMHO not uncommon or interesting for the user.

Flagging it makes it hard to deduplicate Nikto findings because it's content changes with every request.

Links/Info

Header description: https://www.w3.org/TR/trace-context/

@moxli moxli changed the title Feature: Add the traceparent header Feature: Add tracing headers Jan 3, 2024
@moxli moxli changed the title Feature: Add tracing headers Feature: Add the traceparent header Jan 3, 2024
@sullo sullo closed this as completed in #817 Mar 1, 2024
sullo added a commit that referenced this issue Apr 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant