]> git.ipfire.org Git - ipfire-2.x.git/commit
proxy.cgi: Suppress Squid version by default
authorPeter Müller <peter.mueller@ipfire.org>
Fri, 18 Jun 2021 07:07:21 +0000 (09:07 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Fri, 18 Jun 2021 08:47:36 +0000 (08:47 +0000)
commite981b751d180982563fb8a76e63bddadb69a5bd8
treef2cc0b21dfb812f2439812d9838eed896a0ec6cd
parent270d7c0d3747d7124a66770ee729aa519b8ee847
proxy.cgi: Suppress Squid version by default

While hiding version information does not come with any _actual_
security improvements, it is generally a good thing to do so by default:
Attackers will still be able to reasonably guess or enumerate the
software version running, but need to conduct additional effort to do
so, hence more likely raising alerts and drawing attention on their
operation.

In addition, we suppress version details somewhere else in IPFire 2.x by
default, too (e. g. Unbound and Apache), so we can justify this patch by
aiming to stay consistent, I guess. :-)

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
html/cgi-bin/proxy.cgi