Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-56217

Allow version HTTP header to be hidden

XMLWordPrintable

    • extended-security-settings-1.2

      It would be nice to have a option (-D or something similar) to hide the version information of the running jenkins master instance.

      This would avoid (make it harder) for hackers to attack a jenkins instance which has known vulnerabilities. 

      Currently the website shows in the footer the current running jenkins version.

      I would like to hide this information or overwrite it with "-1" or similar. Such option can be set a java system property.

      We are running jenkins master as WAR archive inside a tomcat container. So the java system property would be the best way to solve this.

       

      PS: feel free to change the component .. there seems to be no component for jenkins master or the general UI available.

            jvz Matt Sicker
            waffel Thomas Wabner
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: