X-Powered-Byヘッダーを送信しない機能が欲しい fix #4125

IwasakiRyuichi · web-flow · commit 84ea951693b1 · 2025-02-26T10:30:25.000+09:00
diff --git a/plugins/baser-core/config/bootstrap.php b/plugins/baser-core/config/bootstrap.php
@@ -74,3 +74,8 @@
     Configure::write('App.fullBaseUrl', 'https://localhost');
 }
 
+/**
+ * X-Powered-Byヘッダーを送信を削除
+ * 脆弱性につながるためPHPバージョンを隠蔽
+ */
+header_remove('X-Powered-By');

Original file line number	Diff line number	Diff line change
`@@ -74,3 +74,8 @@`
`74`	`74`	`Configure::write('App.fullBaseUrl', 'https://localhost');`
`75`	`75`	`}`
`76`	`76`
	`77`	`+/**`
	`78`	`+ * X-Powered-Byヘッダーを送信を削除`
	`79`	`+ * 脆弱性につながるためPHPバージョンを隠蔽`
	`80`	`+ */`
	`81`	`+header_remove('X-Powered-By');`