Software version disclose in links
Open
- Dominant language
- Elm
- Stars
- 1.3k
- Forks
- 72
- Avg merge
- 21h 30m
- Merged PRs (30d)
- 1
Description
Serurity scan has showed software version is in the webb links, e.g.
https://DOMAIN/app/assets/sharry-webapp/1.11.0/favicon/favicon-32x32.png
Please, can it be hidden via random symbols or excluded?
Contributor guide
Research direction
Start by tracing how the /app/assets/sharry-webapp/1.11.0/favicon/favicon-32x32.png URL is generated and where the 1.11.0 version segment comes from. Confirm that the favicon remains accessible while the software version is no longer disclosed in web links.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elm
- Domain
- security, web-dev
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100