From 6c8c15f914cd375da1db5d0cd4d924a86c53d4c1 Mon Sep 17 00:00:00 2001
From: Rigel Kent <sendmemail@rigelk.eu>
Date: Wed, 9 Dec 2020 04:18:44 +0100
Subject: [PATCH] disable x-powered-by even with csp disabled

follows Express and helmet recommendations
---
 server.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.ts b/server.ts
index f2e589243..8a762a905 100644
--- a/server.ts
+++ b/server.ts
@@ -20,7 +20,7 @@ import * as cli from 'commander'
 process.title = 'peertube'
 
 // Create our main app
-const app = express()
+const app = express().disable("x-powered-by")
 
 // ----------- Core checker -----------
 import { checkMissedConfig, checkFFmpeg, checkNodeVersion } from './server/initializers/checker-before-init'