Aarogyasetu_android: Do not send the 'server' header in HTTP responses

Created on 27 May 2020  路  2Comments  路  Source: nic-delhi/AarogyaSetu_Android

The 'server' header config often left default and gives away the web server details which are not needed to be sent in response. Kindly, disable them. Good day.

picture sandeepst

Most helpful comment

The server code is going to be open sourced as well, and hiding such detail is security by obscurity, which is not recommended. Also, the issue is unrelated to Android app code

picture iamareebjamal on 27 May 2020
👍2

All 2 comments

I'm not sure if this repo needs the fixing. it must be at the backend Infra level

asgs picture asgs on 27 May 2020
👍2

The server code is going to be open sourced as well, and hiding such detail is security by obscurity, which is not recommended. Also, the issue is unrelated to Android app code

iamareebjamal picture iamareebjamal on 27 May 2020
👍2
Was this page helpful?
0 / 5 - 0 ratings

Related issues

mayurjc picture mayurjc  路  3Comments
4j4yk picture 4j4yk  路  4Comments
hardik0899 picture hardik0899  路  4Comments
lakshaykaushik picture lakshaykaushik  路  3Comments
r-ush picture r-ush  路  3Comments