From fcd2948d5f95fac456b96908d19c624e7f5f4d8b Mon Sep 17 00:00:00 2001
From: Samuel Lucidi <sam@samlucidi.com>
Date: Mon, 13 Nov 2023 13:46:30 -0500
Subject: [PATCH] :seedling: Disable "X-Powered-By: Express" header (#1537)

Fixes https://issues.redhat.com/browse/MTA-1649

<!--
## PR Title Prefix

Every **PR Title** should be prefixed with :text: to indicate its type.

- Breaking change: :warning: (`:warning:`)
- Non-breaking feature: :sparkles: (`:sparkles:`)
- Patch fix: :bug: (`:bug:`)
- Docs: :book: (`:book:`)
- Infra/Tests/Other: :seedling: (`:seedling:`)
- No release note: :ghost: (`:ghost:`)

For example, a pull request containing breaking changes might look like
`:warning: My pull request contains breaking changes`.

Since GitHub supports emoji aliases (ie. `:ghost:`), there is no need to
include
the emoji directly in the PR title -- **please use the alias**. It used
to be
the case that projects using emojis for PR typing had to include the
emoji
directly because GitHub didn't render the alias. Given that `:warning:`
is
easy enough to read as text, easy to parse in release tooling, and
rendered in
GitHub well, we prefer to standardize on the alias.

For more information, please see the Konveyor
[Versioning
Doc](https://github.com/konveyor/release-tools/blob/main/VERSIONING.md).
-->

Signed-off-by: Sam Lucidi <slucidi@redhat.com>
---
 server/src/index.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/src/index.js b/server/src/index.js
index 895c4504d5..44081efc1a 100644
--- a/server/src/index.js
+++ b/server/src/index.js
@@ -23,6 +23,7 @@ const brandType = KONVEYOR_ENV.PROFILE;
 const port = parseInt(KONVEYOR_ENV.PORT, 10) || 8080;
 
 const app = express();
+app.set("x-powered-by", false);
 app.use(cookieParser());
 
 // Setup proxy handling