Dockerfile icon indicating copy to clipboard operation
Dockerfile copied to clipboard
verified publisher icon webdevops

Insecure default setting `ServerTokens Full`

Open vertexvaar opened this issue 4 years ago • 0 comments

Hi,

the Apache Web Server has an insecure default setting ServerTokens. The default value is Full. I suggest that we set this value to the secure setting Prod for all non-dev images.

Docs:

  • https://httpd.apache.org/docs/2.4/de/mod/core.html#servertokens

vertexvaar avatar Mar 19 '21 11:03 vertexvaar