New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FR] option to remove 'Server' from resp header #73

Open

mrx23dot opened this issue Mar 29, 2021 · 0 comments

mrx23dot commented Mar 29, 2021

Just discovered there is a huge information leak in the Response Header:

Server: Werkzeug/0.0.1 Python/3.1.7

Please add option to drop this, or maybe to modify it.

Something like

@app.after_request
def add_header(response):
response.headers['Server'] = 'dummy'
return response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment