隐藏或修改nginx返回的Server信息(以及隐藏版本号)


如何隐藏nginx版本号:

[root@localhost /]# vi /etc/nginx/nginx.conf
[root@localhost /]# nginx -t
[root@localhost /]# nginx -s reload

配置文件中,http区段中插入“server_tokens  off;”,重新载入配置文件

worker_processes  1;
events {
    worker_connections  1024;
}
http {
    include       mime.types;
    default_type  application/octet-stream;
    server_tokens  off;
    expires         5s;
    sendfile        on;

隐藏或修改nginx返回的Server信息:

[root@localhost /]# vi /opt/nginx/nginx-1.2.0/src/http/ngx_http_special_response.c 
找到29行:修改展示名称(LLSERVER)
[root@localhost /]# "<hr><center>LLSERVER</center>" CRLF
[root@localhost /]# cd
/opt/nginx/nginx-1.2.0/src/http/ngx_http_header_filter_module.c
[root@localhost /]# vi
/opt/nginx/nginx-1.2.0/src/http/ngx_http_header_filter_module.c
找到49和50行: 修改展示名称(Server: LLSERVER)
[root@localhost /]# static char ngx_http_server_string[] = "Server: LLSERVER" CRLF;
[root@localhost /]# static char ngx_http_server_full_string[] = "Server: LLSERVER " NGINX_VER CRLF;
隐藏nginx请求头header:修改nginx.conf ,在location中添加配置如下:
[root@localhost /]# proxy_hide_header X-Frame-Options;   //将X-Frame-Options换成Location
[root@localhost /]# add_header X-Frame-Options SAMEORIGIN always; //将X-Frame-Options换成Location

 


免责声明!

本站转载的文章为个人学习借鉴使用,本站对版权不负任何法律责任。如果侵犯了您的隐私权益,请联系本站邮箱yoyou2525@163.com删除。



 
粤ICP备18138465号  © 2018-2025 CODEPRJ.COM