DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=27345>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=27345

ServerTokens shouldn't affect mod_status

           Summary: ServerTokens shouldn't affect mod_status
           Product: Apache httpd-2.0
           Version: 2.0.48
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Minor
          Priority: Other
         Component: mod_status
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


When httpd.conf contains ServerTokens Prod, server-status shows only Server 
Version: Apache.

I think server-status should always show all/full tokens, because IMO 
ServerTokens is used as restriction for public and not as restriction for 
admins.
I also think there should be an option to disable the Server: header completely 
(via ServerTokens None).

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to