Merge branch 'dev' into feature/43-postal_from_env

Merge pull request 'Disabled the x-served-by and x-powered-by Headers' (#44 ) from feature/41-owasp_headers into dev
Reviewed-on: #44
2020-12-22 12:41:15 +01:00 · 2020-12-21 17:27:12 +00:00 · 2020-12-21 17:48:04 +01:00
1 changed files with 2 additions and 0 deletions
--- a/src/loaders/express.ts
+++ b/src/loaders/express.ts
@ -6,6 +6,8 @@ import { Application } from "express";
 */
 export default async (app: Application) => {
 	app.enable('trust proxy');
+	app.disable('x-powered-by');
+	app.disable('x-served-by');
 	app.use(cookieParser());
 	return app;
 };
Author	SHA1	Message	Date
Nicolai Ort	84a7f30a60	Merge branch 'dev' into feature/43-postal_from_env All checks were successful continuous-integration/drone/pr Build is passing Details	2020-12-22 12:41:15 +01:00
Philipp Dormann	b6cf3b24d4	Merge pull request 'Disabled the x-served-by and x-powered-by Headers' (#44 ) from feature/41-owasp_headers into dev All checks were successful continuous-integration/drone/push Build is passing Details Reviewed-on: #44	2020-12-21 17:27:12 +00:00
Nicolai Ort	19422edbae	Disabled the x-served-by and x-powered-by Headers All checks were successful continuous-integration/drone/pr Build is passing Details ref #41	2020-12-21 17:48:04 +01:00