Project

General

Profile

Actions

Feature #64429

closed

Remove version number from meta-generator

Added by Benjamin Robinson almost 10 years ago. Updated about 7 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Frontend
Target version:
Start date:
2015-01-22
Due date:
% Done:

100%

Estimated time:
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

It should be possible to hide the version number in ...

<meta name="generator" content="TYPO3 6.2 CMS">

... via TS (or in principle), because the visitor does not need to know if the software is f.e. outdated and therefor may have some security issues:

<meta name="generator" content="TYPO3 CMS">
Actions #1

Updated by Mathias Schreiber almost 10 years ago

  • Tracker changed from Bug to Feature
  • Category set to Frontend
  • Target version set to 7.2 (Frontend)
Actions #2

Updated by Xavier Perseguers almost 10 years ago

We should be aware that hiding the ("major") version of TYPO3 does not enhance security at all. It is straightforward, even without this info to retrieve an relatively exact guess of which version (patch!) the website is running.

So this is more a cosmetic change for clients not aware of this and willing to feel safer without any good reason.

Actions #3

Updated by Benjamin Robinson almost 10 years ago

That's true, it would not enhance security, but it would make it less easier to find unsecure sites. The version does not concern the visitor (and search engines) and we don't need to provide it on a silver platter. A bing search for "TYPO3 4.1 CMS" has 13.100 results and most of them are from trustcheck.net and netzcheck.com pointing to outdated installations, due to the meta tag.

Recently an agency contacted one of our clients and pretended his TYPO3 would be outdated – trying to get a job for an update. My client was wondering how they could know the major-version. I told him that anyone – even without any special knowledge or effort – could read it in the html-meta-tags with just two mouseclicks, unfortunately, and i had to explain that 4.5 LTS is still maintained until march and that we had good reasons not to upgrade to early.

Actions #4

Updated by Frank Nägler over 9 years ago

Some years ago I reported the same issue, after many discussions my patch request was rejected.
Before anyone start working on this patch, this feature should be checked and discussed.

Actions #5

Updated by Benjamin Robinson over 9 years ago

Thanks! I found the old feature request with your patch: https://forge.typo3.org/issues/17887

The request has been closed with the argumentation, that it does not enhance security and because of missing feedback. The cause for the obligatory publication of the version number remained unfounded.

Actions #6

Updated by Gerrit Code Review over 9 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #7

Updated by Gerrit Code Review over 9 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #8

Updated by Gerrit Code Review over 9 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #9

Updated by Gerrit Code Review over 9 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #10

Updated by Gerrit Code Review over 9 years ago

Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #11

Updated by Gerrit Code Review over 9 years ago

Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/37945

Actions #12

Updated by Gerrit Code Review over 9 years ago

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/40243

Actions #13

Updated by Wouter Wolters over 9 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #14

Updated by Riccardo De Contardi about 7 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF