From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-4.2 required=3.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 Received: from localhost (dcvr.yhbt.net [127.0.0.1]) by dcvr.yhbt.net (Postfix) with ESMTP id E90F71F47C; Sun, 8 Jan 2023 19:47:47 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=80x24.org; s=selector1; t=1673207268; bh=8/TdrDhBytH/Ty7bHEFyq8gI8OmXie9Uy4C9/NzCmdM=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=YrAECZTmQunAuwxCsfk3ut/Ysw8zW9MTca4n8A7jwLBiYskQx5NPfCU+SUQuzmxzg 1OgREfGYboZ0gLrrUF9+POorc8IL58mTut2E3kwatlpD0f7153jrxeAyKvKHLkENlB /sMDMx0Tw4hG1IlP/4HHoSKHMnw/iFJ9wgavnHyw= Date: Sun, 8 Jan 2023 19:47:38 +0000 From: Eric Wong To: Thomas =?utf-8?Q?Wei=C3=9Fschuh?= Cc: meta@public-inbox.org Subject: Re: Add "generator" information to HTML pages Message-ID: <20230108194738.M225235@dcvr> References: <20230108190404.nghzrip46oh4wl3p@snowball.t-8ch.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20230108190404.nghzrip46oh4wl3p@snowball.t-8ch.de> List-Id: Thomas Weißschuh wrote: > Hi, > > it would be nice if public-inbox could extend the HTML pages it > generates with the "generator" meta tag [0]. > Especially the version would be useful. > > This would help users during debugging to see the specific version of > public-inbox they are looking at. What would users be debugging? Admins would be the only ones who care, I think... Version info becomes worthless if an admin blocks/alters certain endpoints via nginx/varnish or just editing the code. > For example: > > > Some page > > I prefer to disclose as little information as possible in case vulnerabilities are found. Alone, security by obscurity doesn't work, but obscurity does make things more difficult for attackers (same reason camouflage exists). I also don't like wasting memory+bandwidth on things most users won't see or care about. This is especially true for stuff at the beginnning of the output since that's most likely to succeed in being transferred. > [0] https://html.spec.whatwg.org/multipage/semantics.html#meta-generator > > Thanks, > Thomas