girder/ansible-role-girder-nginx

Consider removing Server header

zachmullen opened this issue · 0 comments

For a production install, returning a Server header that includes the exact software and version being used is considered by many to be a security bug. This role currently includes such a header, in my case it shows Server: nginx/1.14.0 (Ubuntu). My vote would be to remove this entirely in prod.