From 18f3f3643b9a44067a030ca1c825805f1e026a69 Mon Sep 17 00:00:00 2001
From: Carlos Valente <34649812+cpvalente@users.noreply.github.com>
Date: Sat, 23 Jul 2022 22:14:50 +0200
Subject: [PATCH] security(server): disable x-powered-by headers (#181)

* security(server): disable x-powered-by headers
---
 server/src/app.js       | 1 +
 server/src/package.json | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/server/src/app.js b/server/src/app.js
index ced15b2ec..0345eb198 100644
--- a/server/src/app.js
+++ b/server/src/app.js
@@ -36,6 +36,7 @@ console.log(`Starting ontime version ${process.env.npm_package_version}`);
 
 // Create express APP
 const app = express();
+app.disable('x-powered-by');
 
 // setup cors for all routes
 app.use(cors());
diff --git a/server/src/package.json b/server/src/package.json
index ab0e80ca0..27f78b441 100644
--- a/server/src/package.json
+++ b/server/src/package.json
@@ -1,7 +1,7 @@
 {
   "name": "ontime-server",
   "type": "module",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "dependencies": {
     "body-parser": "^1.20.0",
     "dotenv": "^16.0.1",