Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Ability to modify the SERVER header to avoid Banner Disclosure

#166

In order to get a security audit cleared, we need to make sure we do not disclose banner. Currently, the SERVER response header shows up as "thin 1.5.0 codename Knife" which is giving out the version information.

I couldn't find a way to work around this. Is it possible to make this be less descriptive?

Reported by Pavan Sudarshan · October 16th, 2012 @ 05:59 AM

State: new
Milestone: Future
Assigned to: macournoyer macournoyer

Activity

  1. macournoyer
    macournoyer

    Should be fixed in master.

    You'll be able to change it like so:

    response.headers["Server"] = "whatever"

    October 30th, 2012 @ 08:25 AM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.