Bläddra i källkod

[backend] mask server response header due to security vulnerabilities (#3222)

Co-authored-by: Athithyaa Selvam <aselvam@cloudera.com>
Athithyaa Selvam 2 år sedan
förälder
incheckning
b957904c90
1 ändrade filer med 4 tillägg och 0 borttagningar
  1. 4 0
      desktop/core/src/desktop/management/commands/rungunicornserver.py

+ 4 - 0
desktop/core/src/desktop/management/commands/rungunicornserver.py

@@ -116,6 +116,10 @@ def rungunicornserver():
     else:
       ssl_keyfile = conf.SSL_PRIVATE_KEY.get()
 
+  # Hide server name = gunicorn and mask it to apache
+  gunicorn.SERVER_SOFTWARE = 'apache'
+  os.environ['SERVER_SOFTWARE'] = gunicorn.SERVER_SOFTWARE
+
   options = {
       'accesslog': "-",
       'backlog': 2048,