ARTIFACTORY: Hide Artifactory version info in header X-frog-Version

Introduction 

Upon accessing the artifactory system, it is found that the X-Jfrog-Version in the response header reveals Artifactory's version information, leading to a risk of version information leakage.

 


Resolution 

Hide the header info by using nginx server;

Edit  nginx.conf, and add the  “proxy_hide_header X-JFrog-Version;” , like: 

server{
    ###
    location /{
    ###
    proxy_hide_header X-JFrog-Version;
    ###
}
    ###
}

Save nginx.conf and reload nginx server to make configuration effective, the info will be hidden.
Also other headers’ info can be hidden by this method.