14.3.3 Verify that the HTTP headers or any part of the HTTP response do not
expose detailed version information of system components.
For ActiveMQ broker. I have a problem with STOMP protocol CONNECTED message
which looks like this:
user-name:[hidden email] And reveal(to hypothetical evil one) my ActiveMQ broker version So my
question is how to hide the whole server header or if it is not possible
maybe its version part.
After some research, I have found that this can be done by little hacking
This solution works but it is inconvenient for hiding this version in a
docker container or helm package,
maybe there is another solution or maybe should I create an enhancement
request for ActiveMQ to allow configure it somehow?