foreman icon indicating copy to clipboard operation
foreman copied to clipboard
verified publisher icon theforeman

Secure Foreman version disclosure in API responses

Open archanaserver opened this issue 7 months ago • 2 comments

archanaserver avatar May 21 '25 08:05 archanaserver

Why do we want to put this behind a setting? As in, should we just remove the version from the API response all together?

ehelms avatar Jun 03 '25 12:06 ehelms

Moving this to draft(pause) for now as my focus has shifted to other priority tasks. Also noted Ewoud’s point on SAT-35394, Satellite version remains easy to identify, the same consideration applies to the related Foreman Proxy ticket, so both might need a unified approach later i believe.

archanaserver avatar Nov 06 '25 09:11 archanaserver