Skip to content

Remove server version from header#3

Open
samuelcatalan-sketch wants to merge 4 commits into
coderanger:masterfrom
samuelcatalan-sketch:master
Open

Remove server version from header#3
samuelcatalan-sketch wants to merge 4 commits into
coderanger:masterfrom
samuelcatalan-sketch:master

Conversation

@samuelcatalan-sketch
Copy link
Copy Markdown

Added a --hide-server header flag when executing from command line

Can keep server version when wanting to develop or debug, but can hide it from headers for security reasons

Comment thread src/kubernetes_wsgi/server.py Outdated
from twisted.logger import STDLibLogObserver # type: ignore
from twisted.python import threadpool # type: ignore
from twisted.web.http import Request, proxiedLogFormatter # type: ignore
import twisted.web.http
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Appears to be unused.

@lee-harmonic
Copy link
Copy Markdown

@coderanger A pentest suggested this change and this is the most pragmatic way to achieve it. There is an open issue in Twisted for this from many years ago with no indication that they will fix it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants