-
Improvement
-
Resolution: Fixed
-
Trivial
-
LTS
-
-
extended-security-settings-1.2
It would be nice to have a option (-D or something similar) to hide the version information of the running jenkins master instance.
This would avoid (make it harder) for hackers to attack a jenkins instance which has known vulnerabilities.
Currently the website shows in the footer the current running jenkins version.
I would like to hide this information or overwrite it with "-1" or similar. Such option can be set a java system property.
We are running jenkins master as WAR archive inside a tomcat container. So the java system property would be the best way to solve this.
PS: feel free to change the component .. there seems to be no component for jenkins master or the general UI available.