Skip to content

Commit bfd25a5

Browse files
authored
Hide NGINX version (#2305)
Problem: As a user of NGF, I want the NGINX version of my installation of NGF hidden by default, so that I do not inadvertently expose which vulnerabilities my version of NGINX is vulnerable to. Solution: Hide the nginx version that's included in responses.
1 parent 06a0090 commit bfd25a5

File tree

2 files changed

+4
-0
lines changed

2 files changed

+4
-0
lines changed

internal/mode/static/nginx/conf/nginx-plus.conf

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@ http {
2727
sendfile on;
2828
tcp_nopush on;
2929

30+
server_tokens off;
31+
3032
server {
3133
listen 127.0.0.1:8765;
3234
root /usr/share/nginx/html;

internal/mode/static/nginx/conf/nginx.conf

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,8 @@ http {
2727
sendfile on;
2828
tcp_nopush on;
2929

30+
server_tokens off;
31+
3032
server {
3133
listen unix:/var/run/nginx/nginx-status.sock;
3234
access_log off;

0 commit comments

Comments
 (0)