[KNOX-932] Option to remove the server-name from HTTP-header response

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.13.0
• Labels: http-headers
• Assignee: Ljmiv
• Reporter: Kunal Rajguru
• Created: 02/May/17 17:51
• Updated: 10/Mar/20 20:22
• Resolved: 09/Jun/17 03:25

Description

Option to remove the server name which is sent as HTTP-Header in the response

For example :

curl -i -k -u <username>:<password> -X GET 'https://localhost:8443/gateway/default/webhdfs/v1/?op=LISTSTATUS'
HTTP/1.1 200 OK
Set-Cookie: JSESSIONID=fs2lu9w7jcgt1tshnfs1cqf8v;Path=/gateway/default;Secure;HttpOnly
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache
Expires: Wed, 15 Mar 2017 12:49:24 GMT
Date: Wed, 15 Mar 2017 12:49:24 GMT
Pragma: no-cache
Expires: Wed, 15 Mar 2017 12:49:24 GMT
Date: Wed, 15 Mar 2017 12:49:24 GMT
Pragma: no-cache
Server: Jetty(6.1.26.hwx)
Content-Type: application/json
Content-Length: 2593

Issue Links

• is duplicated by: KNOX-2256 Showing jetty version on error handling causing Improper error handling as a security vulnerability
• is duplicated by: KNOX-1316 API 404 responses should not contain server details
• is related to: KNOX-2285 Change gateway.server.header.enabled default to false
• is related to: KNOX-2257 Documentation for KNOX-932 / KNOX-2285 gateway.server.header.enabled