wallabag / wallabag/docker

Add an option to disable "X-Powered-By" header

Open
#86 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Shell
Stars
769
Forks
168
PR merge metrics
No merged PRs in 30d

Description

In order to improve the security a bit, by trying to minimise the amount of information you give out about the, it'd be great if we had an option to disable `X-Powered-By` header.
Latest version of wallabag returns:
```
X-Powered-By PHP/7.1.7
```
Only one line has to be changed:
https://github.com/wallabag/docker/blob/master/root/etc/php7/php.ini#L376
```
expose_php = Off
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.