Skip to content

Commit 2739a8c

Browse files
authored
hide nginx version from response headers (#99)
1 parent 130a6ba commit 2739a8c

File tree

1 file changed

+2
-1
lines changed
  • core/files/etc/nginx/includes

1 file changed

+2
-1
lines changed

core/files/etc/nginx/includes/misp

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,9 @@ add_header X-Permitted-Cross-Domain-Policies "none" always;
1414
add_header X-Robots-Tag "none" always;
1515
add_header X-XSS-Protection "1; mode=block" always;
1616

17-
# remove X-Powered-By, which is an information leak
17+
# remove X-Powered-By and nginx version, which is an information leak
1818
fastcgi_hide_header X-Powered-By;
19+
server_tokens off;
1920

2021
location / {
2122
try_files $uri $uri/ /index.php$is_args$query_string;

0 commit comments

Comments
 (0)