Remove version string from http response headers, to avoid any information disclosure about the sender's server

This commit is contained in:
Micah Lee 2017-05-22 14:58:23 -07:00
parent e01716bca9
commit 174c03e892
No known key found for this signature in database
GPG Key ID: 403C2657CD994F73

View File

@ -54,7 +54,7 @@ security_headers = [
('X-Xss-Protection', '1; mode=block'),
('X-Content-Type-Options', 'nosniff'),
('Referrer-Policy', 'no-referrer'),
('Server', strings._('version_string').format(common.get_version()))
('Server', 'OnionShare')
]
def set_file_info(filenames, processed_size_callback=None):