Skip to content

Commit

Permalink
docs: Update reduce_fingerprint.yml (#183)
Browse files Browse the repository at this point in the history
  • Loading branch information
gotbadger authored Jan 5, 2024
1 parent 889f769 commit d2b2edb
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion rules/javascript/express/reduce_fingerprint.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ metadata:
By default, Express.js sends the X-Powered-By response header banner. This can be disabled using the app.disable() method:
```
```javascript
app.disable('x-powered-by')
```
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ exports[`javascript_express_reduce_fingerprint insecure 1`] = `
],
"id": "javascript_express_reduce_fingerprint",
"title": "Security misconfiguration detected (server fingerprinting).",
"description": "## Description\\n\\nIt can help to provide an extra layer of security to reduce server fingerprinting. Though not a security issue itself, a method to improve the overall posture of a web server is to take measures to reduce the ability to fingerprint the software being used on the server. Server software can be fingerprinted by quirks in how they respond to specific requests.\\n\\nBy default, Express.js sends the X-Powered-By response header banner. This can be disabled using the app.disable() method:\\n\\n\`\`\`\\n app.disable('x-powered-by')\\n\`\`\`\\n\\n## Resources\\n\\n- [Express Security Best Practices](https://expressjs.com/en/advanced/best-practice-security.html)\\n",
"description": "## Description\\n\\nIt can help to provide an extra layer of security to reduce server fingerprinting. Though not a security issue itself, a method to improve the overall posture of a web server is to take measures to reduce the ability to fingerprint the software being used on the server. Server software can be fingerprinted by quirks in how they respond to specific requests.\\n\\nBy default, Express.js sends the X-Powered-By response header banner. This can be disabled using the app.disable() method:\\n\\n\`\`\`javascript\\n app.disable('x-powered-by')\\n\`\`\`\\n\\n## Resources\\n\\n- [Express Security Best Practices](https://expressjs.com/en/advanced/best-practice-security.html)\\n",
"documentation_url": "https://docs.bearer.com/reference/rules/javascript_express_reduce_fingerprint",
"line_number": 4,
"full_filename": "/tmp/bearer-scan/insecure.js",
Expand Down

0 comments on commit d2b2edb

Please sign in to comment.