FS#116 - Too detailed machine informaton sent in HTTP requests.
Attached to Project:
Uzbl
Opened by Dikkie Dik (DonQuichote) - 2009-09-11 11:45:05 AM
Last edited by Dieter Plaetinck (Dieter_be) - 2009-09-12 09:28:29 AM
Opened by Dikkie Dik (DonQuichote) - 2009-09-11 11:45:05 AM
Last edited by Dieter Plaetinck (Dieter_be) - 2009-09-12 09:28:29 AM
|
DetailsUzbl sends the name of the machine along with the identification string. I suppose this is not very smart security-wise. Identification string follows, but I took the liberty of X'ing out my machine name. The output seems to come from `uname -a`.
Uzbl (Webkit 1.1.12) (Linux XXXXXXXXX 2.6.28-15-generic #51-Ubuntu SMP Mon Aug 31 13:33:16 UTC 2009 i686 [i686]) (Commit 9ffda40a7fe43be4df100aa1e599d4556833b4ad) |
This task depends upon
machine name should not be in the default user agent.