From 51079b0252deca43d0e40e54fe24e7819990deca Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jesu=CC=81s=20Pe=CC=81rez?= <jesusprubio@gmail.com>
Date: Tue, 21 Jun 2016 19:43:09 +0200
Subject: [PATCH] [API] X-Powered-By" Express header disabled. Fixes #1036

To improve the security avoiding a possible fingerprinting attack

Ref.: http://expressjs.com/en/advanced/best-practice-security.html#at-a-minimum-disable-x-powered-by-header
---
 app.js | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app.js b/app.js
index 8e7bb15ec2..4b7e28906b 100644
--- a/app.js
+++ b/app.js
@@ -42,6 +42,8 @@
         process.exit(0);
     }
 
+    app.disable('x-powered-by');
+
     // Override bundles.json for HTTP requests
     app.use('/' + BUNDLE_FILE, function (req, res) {
         var bundles;