Skip to main content
Information Security

Return to Question

Post Closed as "Duplicate" by Sjoerd, user163495, multithr3at3d, Xander, Benoit Esnard
added 54 characters in body
Source Link
stormtrooper
stormtrooper
  • 491
  • 1
  • 4
  • 4

We have a HTML file with a minified JSlibrary pasted inside with the license header and version number.

Our client reported that it's a security risk (https://www.owasp.org/index.php/Top_10-2017_A6-Security_Misconfiguration) because the version number of the library is exposed.

If we use an external JS file and just link to the file from the HTML using tag, will the issue still be reported?

We have a HTML file with a minified JSlibrary pasted inside with the license header and version number.

Our client reported that it's a security risk (https://www.owasp.org/index.php/Top_10-2017_A6-Security_Misconfiguration)

If we use an external JS file and just link to the file from the HTML using tag, will the issue still be reported?

We have a HTML file with a minified JSlibrary pasted inside with the license header and version number.

Our client reported that it's a security risk (https://www.owasp.org/index.php/Top_10-2017_A6-Security_Misconfiguration) because the version number of the library is exposed.

If we use an external JS file and just link to the file from the HTML using tag, will the issue still be reported?

Source Link
stormtrooper
stormtrooper
  • 491
  • 1
  • 4
  • 4

Does A6 - Security Misconfiguration be reported for embedded JS?

We have a HTML file with a minified JSlibrary pasted inside with the license header and version number.

Our client reported that it's a security risk (https://www.owasp.org/index.php/Top_10-2017_A6-Security_Misconfiguration)

If we use an external JS file and just link to the file from the HTML using tag, will the issue still be reported?