On Fri, 3 Nov 2006, Gentoo wrote:
Yes.
On 10/30/06, Igor Sysoev <is-G...@public.gmane.org> wrote:
On Sun, 29 Oct 2006, Toshiki NISHIHATA wrote:
2006/10/29, Igor Sysoev <is-G...@public.gmane.org>:
On Sun, 29 Oct 2006, Toshiki NISHIHATA wrote:
I use nginx of GNU/Linux Ecth(testing) package.
# nginx -v
nginx version: nginx/0.4.2
built by gcc 4.1.2 20060901 (prerelease) (Debian 4.1.1-13)
For security, I want to hide the http header; "Server: nginx/0.4.2
".
I thouth that "proxy_pass_header Server" allows transferring "Server"
header forbidden.
So, I rewrite follow at /etc/nginx/nginx.conf, but header "Server"
didn't
hide.
location / {
root /var/www;
proxy_pass_header Server;
}
$ telnet sample.com 80
GET /index.html HTTP/1.0
HTTP/1.1 200 OK
Server: nginx/0.4.2 <-------------- want to hide!!
Date: Sat, 28 Oct 2006 16:58:28 GMT
Content-Type: text/html
Content-Length: 151
....
What should I do?
"proxy_pass_header Server" passes a backend Server header only.
To disable Server header for static responses you need to patch the
sources:
currently there is no directive to disable it.
Thank you to respond a baby question.
As a future plan of development,
Don't you have a plan to add such a directive?
No.
The patch to delete the header entirely is attached.