3 replies

1. Jelmer Mastodon 1 hr later

   @zachleat we often have to remove the generator meta tag from our websites, as a result of security tests. It is considered information disclosure that is preventable, so we always end up removing it.

   1. Zach Leatherman Mastodon 1 day later

      @jelmerdemaat that’s wild — since with most generators that stuff is pretty obvious in the code they generate anyway. You don’t have to put the version number in there!

      1. Jelmer Mastodon 1 day later

         @zachleat Very true! But we still "fix the list of security issues found" for the client... 😅