[Pkg-privacy-commits] [onionshare] 227/256: Remove version string from http response headers, to avoid any information disclosure about the sender's server

[Ulrike Uhlig]

This is an automated email from the git hooks/post-receive script.

ulrike pushed a commit to branch master
in repository onionshare.

commit 174c03e8927bf31dc37ee7dd59d5cc57fb74c4e9
Author: Micah Lee <micah at micahflee.com>
Date:   Mon May 22 14:58:23 2017 -0700

    Remove version string from http response headers, to avoid any information disclosure about the sender's server
---
 onionshare/web.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/onionshare/web.py b/onionshare/web.py
index 68b7fcb..04cf4d1 100644
--- a/onionshare/web.py
+++ b/onionshare/web.py
@@ -54,7 +54,7 @@ security_headers = [
     ('X-Xss-Protection', '1; mode=block'),
     ('X-Content-Type-Options', 'nosniff'),
     ('Referrer-Policy', 'no-referrer'),
-    ('Server', strings._('version_string').format(common.get_version()))
+    ('Server', 'OnionShare')
 ]
 
 def set_file_info(filenames, processed_size_callback=None):

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/onionshare.git