You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@atlas.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2021/07/09 19:34:00 UTC
[jira] [Commented] (ATLAS-4350) Atlas - Jetty Version disclosure in
http response
[ https://issues.apache.org/jira/browse/ATLAS-4350?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17378261#comment-17378261 ]
ASF subversion and git services commented on ATLAS-4350:
--------------------------------------------------------
Commit 9da499ee6819a0d74325d22f78ce4f14873590c1 in atlas's branch refs/heads/branch-2.0 from sidmishra
[ https://gitbox.apache.org/repos/asf?p=atlas.git;h=9da499e ]
ATLAS-4350: Removed Jetty version from http response header
Signed-off-by: sidmishra <si...@apache.org>
(cherry picked from commit fbaaa59e36010a4358d069aec8eebb7f48d59d24)
> Atlas - Jetty Version disclosure in http response
> -------------------------------------------------
>
> Key: ATLAS-4350
> URL: https://issues.apache.org/jira/browse/ATLAS-4350
> Project: Atlas
> Issue Type: Bug
> Reporter: Sidharth Kumar Mishra
> Assignee: Sidharth Kumar Mishra
> Priority: Major
> Attachments: CDPD-26702-Removed-Jetty-version-from-http-response.patch
>
>
> Atlas reveals netty version in http response
> {code:java}
> GET https://atlas.host:8443/gateway/cdp-proxy/atlas/js/utils/Overrides.js?bust=1601951148602
> {code}
> {code:java}
> HTTP/1.1 200 OK
> Connection: close
> Date: Wed, 03 Feb 2021 14:24:28 GMT
> Connection: close
> Last-Modified: Tue, 06 Oct 2020 04:13:55 GMT Content-Type: application/javascript Accept-Ranges: bytes
> Server: Jetty(9.4.26.v20200117)
> Content-Length: 8186
> {code}
> *Recommendation:* Remove the version information from the http response header.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)