Prevent Information Disclosure

Hi, I can't fix the Prevent Information Disclosure issue in defender.
I copied the code to NGNIX. The security warning keeps showing.

  • Adam Czajczyk
    • Support Gorilla

    Hello Michel

    I hope you're well today and thank you for your question!

    When checked "from outside", the server signature for your site is indeed nginx but that's all I can see from here. Is the site entirely served by nginx or is it a setup where Apache is "direct" webserver and there's nginx "in front" of it acting as some sort of reverse proxy/load balancer?

    I'm asking because that's more and more popular configuration recently and if so,rules for preventing information disclosure might need to be added to the .htaccess rather than to nginx configuration. I just want to make sure.

    If it's "nginx only", could you share a part of nginx configuration file with the rules that you added (plugin couple lines above and below, to see the "context")? Also, there might be serveral locations of nginx configuration file so are you sure you added rules to the right one?

    Is it only a Prevent Information Disclosure tweak that's not reported as applied or are there also other that can't "catch up"?

    Let me know, please.

    Best regards,

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.