[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e981b751d180982563fb8a76e63bddadb69a5bd8

[git.ipfire.org] IPFire 2.x development tree branch, next, updated. e981b751d180982563fb8a76e63bddadb69a5bd8

[Michael Tremer]

[-- Attachment #1: Type: text/plain, Size: 2284 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  e981b751d180982563fb8a76e63bddadb69a5bd8 (commit)
      from  270d7c0d3747d7124a66770ee729aa519b8ee847 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e981b751d180982563fb8a76e63bddadb69a5bd8
Author: Peter Müller <peter.mueller(a)ipfire.org>
Date:   Fri Jun 18 09:07:21 2021 +0200

    proxy.cgi: Suppress Squid version by default
    
    While hiding version information does not come with any _actual_
    security improvements, it is generally a good thing to do so by default:
    Attackers will still be able to reasonably guess or enumerate the
    software version running, but need to conduct additional effort to do
    so, hence more likely raising alerts and drawing attention on their
    operation.
    
    In addition, we suppress version details somewhere else in IPFire 2.x by
    default, too (e. g. Unbound and Apache), so we can justify this patch by
    aiming to stay consistent, I guess. :-)
    
    Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
    Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>

-----------------------------------------------------------------------

Summary of changes:
 html/cgi-bin/proxy.cgi | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Difference in files:
diff --git a/html/cgi-bin/proxy.cgi b/html/cgi-bin/proxy.cgi
index 78ad33ad2..1b949d5b6 100644
--- a/html/cgi-bin/proxy.cgi
+++ b/html/cgi-bin/proxy.cgi
@@ -188,7 +188,7 @@ $proxysettings{'ADMIN_MAIL_ADDRESS'} = '';
 $proxysettings{'ADMIN_PASSWORD'} = '';
 $proxysettings{'ERR_LANGUAGE'} = 'en';
 $proxysettings{'ERR_DESIGN'} = 'ipfire';
-$proxysettings{'SUPPRESS_VERSION'} = 'off';
+$proxysettings{'SUPPRESS_VERSION'} = 'on';
 $proxysettings{'FORWARD_VIA'} = 'off';
 $proxysettings{'FORWARD_IPADDRESS'} = 'off';
 $proxysettings{'FORWARD_USERNAME'} = 'off';


hooks/post-receive
--
IPFire 2.x development tree