Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create a middleware to check that no server, language or os info is shared #356

Closed
Idrinth opened this issue Feb 26, 2024 · 0 comments · Fixed by #387
Closed

Create a middleware to check that no server, language or os info is shared #356

Idrinth opened this issue Feb 26, 2024 · 0 comments · Fixed by #387
Labels
component: framework related to the project framework, not the website enhancement New feature or request good first issue Good for newcomers
Milestone
2.7.0

Comments

@Idrinth
Copy link
Member

Idrinth commented Feb 26, 2024

Is your feature request related to a problem? Please describe

It is easy to forget to disable very talkative servers from sharing internals, so we should provide a default check, that will error out if that exists.

Describe the solution you'd like

Make sure there is no Server header and no X-Powered-By header in the response.
@Idrinth Idrinth added enhancement New feature or request good first issue Good for newcomers component: framework related to the project framework, not the website labels Feb 26, 2024
@Idrinth Idrinth added this to the 2.7.0 milestone Feb 26, 2024
Idrinth pushed a commit that referenced this issue Mar 6, 2024
fixes #356 add validator to check for info leakage
8b10ab4
@Idrinth Idrinth mentioned this issue Mar 6, 2024
Merged
9 tasks
Idrinth added a commit that referenced this issue Mar 6, 2024
@Idrinth
fixes #356 add validator to check for info leakage (#387)
6db0c9a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
component: framework related to the project framework, not the website enhancement New feature or request good first issue Good for newcomers
Projects
None yet
Milestone
2.7.0
Development

Successfully merging a pull request may close this issue.

fixes #356 add validator to check for info leakage idrinth-api-bench/issues
1 participant
@Idrinth