coder / coder/coder

Feature Request: Sensitivity to displaying the build and version on the Login page

Open
#17,500 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
14.5k
Forks
1.5k
Avg merge
1d 20h
Merged PRs (30d)
601

Description

### Discussed in https://github.com/coder/coder/discussions/17499

Originally posted by **bjornrobertsson** April 22, 2025
**Feature request:**
Add a variable or method to hide the 'version' string on the Login Form: [LoginPageView.tsx] https://github.com/coder/coder/blob/v2.21.0/site/src/pages/LoginPage/LoginPageView.tsx

**Reason**
The appearance of the build and version on the login page could constitute a threat as it may display entirely too much information for a potentially harmful actor.

Making the Version display optional (and suggesting here to make the default so it is not visible). References to this could inlude i.e. techniques available to Apache, Nginx and most 'HTML providers' would mitigate this with either fully limiting or limiting to major/minor or only 'name'.

It would be reasonable to keep the version visible **after login to the site, although practically any means of hiding the version until the end-user is logged in would be acceptable.

**Current and older Login forms:**
![Screenshot 2025-04-22 at 14 37 39](https://github.com/user-attachments/assets/94bd3425-c98a-4602-a86c-fc77be5bcdc5)
**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.