[API] X-Powered-By" Express header disabled. Fixes #1036

To improve the security avoiding a possible fingerprinting attack

Ref.: http://expressjs.com/en/advanced/best-practice-security.html#at-a-minimum-disable-x-powered-by-header
This commit is contained in:
Jesús Pérez 2016-06-21 19:43:09 +02:00
parent cefb40856b
commit 51079b0252

2
app.js
View File

@ -42,6 +42,8 @@
process.exit(0);
}
app.disable('x-powered-by');
// Override bundles.json for HTTP requests
app.use('/' + BUNDLE_FILE, function (req, res) {
var bundles;