search

uNetworking / uWebSockets.js

μWebSockets for Node.js back-ends :metal:
Apache License 2.0
7.86k stars 569 forks source link

response header expose that the server is uWebSockets #764

Closed tahonaPL closed 2 years ago

tahonaPL commented 2 years ago

This can tell to hacker what kind of service code he needs to start looking into to develop hack. This should be available in debug mode or something. not as a default.

ghost commented 2 years ago

It's a common question (or opinion), it has come up a few times before.

uWS only exposes major version by default and that's by design (or rather by marketing).

tahonaPL commented 2 years ago

well you know that it will be shadowed by gateway or anything else. could be as well optional

ghost commented 2 years ago

There are tons of commercial sites displaying that header, it does not get erased by most proxies by default. Some companies add a blocking to their proxies, some do not.

tahonaPL commented 2 years ago

so why doing that a problem. option with default show (true). would be the same

ghost commented 2 years ago

If that's the same then why are you complaining?