From 660d9ff6f34e9e5a00e93f593bd2288544b1a1c6 Mon Sep 17 00:00:00 2001
From: Pagan Gazzard <page@resin.io>
Date: Tue, 16 Oct 2018 13:26:21 +0200
Subject: [PATCH] Disable express' x-powered-by header

Change-type: patch
Signed-off-by: Pagan Gazzard <page@resin.io>
---
 src/supervisor-api.coffee | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/supervisor-api.coffee b/src/supervisor-api.coffee
index fc698b68..187a8848 100644
--- a/src/supervisor-api.coffee
+++ b/src/supervisor-api.coffee
@@ -29,6 +29,7 @@ module.exports = class SupervisorAPI
 	constructor: ({ @config, @eventTracker, @routers, @healthchecks }) ->
 		@server = null
 		@_api = express()
+		@_api.disable('x-powered-by')
 
 		@_api.get '/v1/healthy', (req, res) =>
 			Promise.map @healthchecks, (fn) ->