#2691: Trac shouldn't announce version number
--------------------------+-------------------------------------------------
Reporter: [EMAIL PROTECTED] | Owner: jonas
Type: defect | Status: closed
Priority: high | Milestone:
Component: general | Version: 0.9.3
Severity: major | Resolution: wontfix
Keywords: security |
--------------------------+-------------------------------------------------
Changes (by cboos):
* resolution: => wontfix
* status: new => closed
Comment:
I agree with mgood, here.
Following the reasoning of this ticket, web servers shouldn't display
their
versions either... I'm sure the people behing Apache's httpd have a good
reason for having chosen to display their '''ServerTokens''' in '''Full'''
by default.
What ''could'' eventually be done, is to provide a setting for this, in
the
spirit of the `ServerSignature/ServerTokens` settings used by apache,
in order to let the admin decide.
But I'm not sure it's worth the trouble, so I'm closing this as
''wontfix''
for now. If someone really wants to make this happen, at least provide a
good patch for it.
--
Ticket URL: <http://projects.edgewall.com/trac/ticket/2691>
The Trac Project <http://trac.edgewall.com/>
_______________________________________________
Trac-Tickets mailing list
[email protected]
http://lists.edgewall.com/mailman/listinfo/trac-tickets
