summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMicah Lee <micah@micahflee.com>2017-05-22 14:58:23 -0700
committerMicah Lee <micah@micahflee.com>2017-05-22 14:58:23 -0700
commit174c03e8927bf31dc37ee7dd59d5cc57fb74c4e9 (patch)
treecfde234fb7491c19185d890161a0a8ffb3f4a725
parente01716bca9baae0e5a7153b11e5f68f83fa2a0a3 (diff)
downloadonionshare-174c03e8927bf31dc37ee7dd59d5cc57fb74c4e9.tar.gz
onionshare-174c03e8927bf31dc37ee7dd59d5cc57fb74c4e9.zip
Remove version string from http response headers, to avoid any information disclosure about the sender's server
-rw-r--r--onionshare/web.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/onionshare/web.py b/onionshare/web.py
index 68b7fcb2..04cf4d1d 100644
--- a/onionshare/web.py
+++ b/onionshare/web.py
@@ -54,7 +54,7 @@ security_headers = [
('X-Xss-Protection', '1; mode=block'),
('X-Content-Type-Options', 'nosniff'),
('Referrer-Policy', 'no-referrer'),
- ('Server', strings._('version_string').format(common.get_version()))
+ ('Server', 'OnionShare')
]
def set_file_info(filenames, processed_size_callback=None):