All geek questions in one place

Private IP Disclosure

I use a security checker to check the vulnerability of my web application.

One result is a warning about a closed IP address that was detected in the HTTP response block. The proposed solution is to remove it, but I have no idea how to do it.

I went through the code and I didn't seem to actually write the IP address, so I'm a bit confused about this.

How to remove this from HTTP response?

I am using Apache server on a Linux machine.

+4
source share
1 answer

In a specific configuration, the Apache web server can disclose the internal IP addresses used by the web server for remote users.

, ServerName ​​( ​​ IP-), UseCanonicalName ( ), Apache IP- .

- CanonicalName Off, ServerName .

http://securitytracker.com/id/1002188

+1

Source: https://habr.com/ru/post/1538569/

More articles:


All Articles