From 872bd7c31426e8b5bc740bea004d86c72347e929 Mon Sep 17 00:00:00 2001 From: Bryce Kwon Date: Fri, 25 Sep 2026 12:33:29 -1000 Subject: Keep the version numbers off the pages The generator meta, the footer and the patch signature named the exact cgit and git versions on every response, which only helps someone matching a site against an advisory. The shipped server configs already hide the server's own version for the same reason, and cgit --version still answers on the host. --- source/ui-shared.c | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) (limited to 'source/ui-shared.c') diff --git a/source/ui-shared.c b/source/ui-shared.c index 2c4db2c..c23e2e1 100644 --- a/source/ui-shared.c +++ b/source/ui-shared.c @@ -1529,7 +1529,7 @@ void cgit_print_docstart(void) html_attr(ctx.cfg.root_desc); html("'>\n"); } - htmlf("\n", cgit_version); + html("\n"); if (ctx.cfg.robots && *ctx.cfg.robots) { html("generated by " - "cgit %s " - "(git %s)\n", - cgit_version, git_version_string); - } + else + html("\n"); html("\n"); html("\n\n"); } -- cgit 2.12.1