Server fingerprinting misconfiguration このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください 。
このルールを試す ID: javascript-express/reduce-server-fingerprinting
Language: JavaScript
Severity: Warning
Category: Security
CWE : 693
Improve your overall server security by taking the step to reduce the likelihood of server fingerprinting the software being used on the server.
By default, Express.js sends the X-Powered-By response header banner which can be disabled with app.disable('X-Powered-By').
If you’re using helmet, you can use either of these methods too:
app.use(helmet())app.use(hidePoweredBy())app.use(helmet.hidePoweredBy())const app = express ()
// express() is called but none of the following were detected afterwards
// app.disable('x-powered-by')
// app.use(hidePoweredBy())
// app.use(helmet.hidePoweredBy())
// app.use(helmet())
const app = express ()
app . use ( helmet ());
// rest of your config
const app = express ()
app . use ( helmet . hidePoweredBy ());
// rest of your config
const app = express ()
app . use ( hidePoweredBy ())
// rest of your config
const app = express ()
app . disable ( 'x-powered-by' )
// rest of your config
Seamless integrations. Try Datadog Code Security
