[ZEPPELIN-2461] Masking Jetty Server version with User-configurable parameter

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 0.7.0
• Fix Version/s: 0.7.3, 0.8.0
• Component/s: Core
• Labels: newbie

Environment

All

• Assignee: Krishna Pandey
• Reporter: Krishna Pandey
• Created: 27/Apr/17 08:35
• Updated: 30/Jan/18 02:36
• Resolved: 03/May/17 15:45

Description

Security conscious organisations does not want to reveal the Application Server name and version to prevent Script-kiddies from finding the information easily when fingerprinting the Application. The exact version number can tell an Attacker if the current Application Server is patched for or vulnerable to certain publicly known CVE associated to it.

Issue Links

• Blocked: ZEPPELIN-2864 Release 0.7.3
• links to: GitHub Pull Request #2293