Project

General

Profile

Feature #44935

Updated by Ernesto Puerta about 4 years ago

By default, HTTP requests to CherryPy return a 'Server' header like 'CherryPy/18.4.0' (where '18.4.0' is the version of the CherryPy). 

 It could be interesting to modify that string for 3 2 different purposes: 
 * Hiding CherryPy name and version 
 * Detecting exposed Ceph-Dashboards exposed to the Internet (if some specific string is used instead). Some services, like "shodan":https://beta.shodan.io/search?query=cherrypy index webservers exposed to the Internet. 
 * Help debug Dashboard/Ceph issues by returning Ceph full version.

Back