You are viewing a plain text version of this content. The canonical link for it is here.
Posted to zeta-issues@incubator.apache.org by "Alexandre Leblanc (JIRA)" <ji...@apache.org> on 2011/01/26 16:15:43 UTC
[jira] Created: (ZETACOMP-49) "X-Powered-By:eZ Components MvcTools"
in the PHP header and "User-Agent: eZ Components" in the email header
"X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the email header
-----------------------------------------------------------------------------------------------------------
Key: ZETACOMP-49
URL: https://issues.apache.org/jira/browse/ZETACOMP-49
Project: Zeta Components
Issue Type: Improvement
Components: Mail, MvcTools
Reporter: Alexandre Leblanc
Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
Actually, we can replace this value but it's not possible to desactivate this Header.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (ZETACOMP-49) "X-Powered-By:eZ Components
MvcTools" in the PHP header and "User-Agent: eZ Components" in the email
header
Posted by "Jérôme Renard (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ZETACOMP-49?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12998759#comment-12998759 ]
Jérôme Renard commented on ZETACOMP-49:
---------------------------------------
Hi Alexandre,
What you described should go in the documentation.
> "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the email header
> -----------------------------------------------------------------------------------------------------------
>
> Key: ZETACOMP-49
> URL: https://issues.apache.org/jira/browse/ZETACOMP-49
> Project: Zeta Components
> Issue Type: Improvement
> Components: Mail, MvcTools
> Reporter: Alexandre Leblanc
> Priority: Minor
>
> Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
> For remove the header in the email :
> $mail = new ezcMailComposer();
> $mail->appendExcludeHeaders(array('User-Agent'));
> For replace "X-Powered-By" :
> $response->generator="PHP"; //in runResponseFilters method of the controler
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Closed] (ZETACOMP-49) "X-Powered-By:eZ Components MvcTools"
in the PHP header and "User-Agent: eZ Components" in the email header
Posted by "Jérôme Renard (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ZETACOMP-49?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jérôme Renard closed ZETACOMP-49.
---------------------------------
Resolution: Fixed
Assignee: Jérôme Renard
Fixed in rev. 1154102
> "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the email header
> -----------------------------------------------------------------------------------------------------------
>
> Key: ZETACOMP-49
> URL: https://issues.apache.org/jira/browse/ZETACOMP-49
> Project: Zeta Components
> Issue Type: Improvement
> Components: Mail, MvcTools
> Reporter: Alexandre Leblanc
> Assignee: Jérôme Renard
> Priority: Minor
>
> Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
> For remove the header in the email :
> $mail = new ezcMailComposer();
> $mail->appendExcludeHeaders(array('User-Agent'));
> For replace "X-Powered-By" :
> $response->generator="PHP"; //in runResponseFilters method of the controler
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (ZETACOMP-49) "X-Powered-By:eZ Components MvcTools"
in the PHP header and "User-Agent: eZ Components" in the email header
Posted by "Alexandre Leblanc (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/ZETACOMP-49?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Alexandre Leblanc updated ZETACOMP-49:
--------------------------------------
Priority: Minor (was: Major)
Description:
Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
For remove the header in the email :
$mail = new ezcMailComposer();
$mail->appendExcludeHeaders(array('User-Agent'));
For replace "X-Powered-By" :
$response->generator="PHP"; //in runResponseFilters method of the controler
was:
Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
Actually, we can replace this value but it's not possible to desactivate this Header.
Solution for remove and replace the headers.
> "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the email header
> -----------------------------------------------------------------------------------------------------------
>
> Key: ZETACOMP-49
> URL: https://issues.apache.org/jira/browse/ZETACOMP-49
> Project: Zeta Components
> Issue Type: Improvement
> Components: Mail, MvcTools
> Reporter: Alexandre Leblanc
> Priority: Minor
>
> Indicate "X-Powered-By:eZ Components MvcTools" in the PHP header and "User-Agent: eZ Components" in the emails may be a vulnerability for identify a platform.
> For remove the header in the email :
> $mail = new ezcMailComposer();
> $mail->appendExcludeHeaders(array('User-Agent'));
> For replace "X-Powered-By" :
> $response->generator="PHP"; //in runResponseFilters method of the controler
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.