chartjs
Hide version from js file
Feature Proposal
For my website, I just received the result of pen-test.
They found some versions on JS file as on chartjs. They think it's an issue to show version of librairies we're using. Do you think it's possible to remove it from the final file?
Here is they screenshoot they sent to us:
Possible Implementation
I tried to remove it from the file, or set like static version = "hidden"; but I get error by some plugins as annotations which can no longer parse it.
I think this would be hard. Is that possible to have a way to say "I know what I'm doing, it's in right version" ?
I don't think removing the version number will solve anything.
Firstly as you mentioned some libraries depend on it to know if certain features are available. Secondly if you remove the version number you can still check the source code and match it against all the versions. So it takes a step more to find the version used but it will never be a secret.
Closing as this is not something that we will do as per my comment above.
Also when importing the library using an CDN you can see the version in the url which you request so that will give it away also away.