sinatra/sinatra-recipes — Issue #21: Preparing for production
Author: bornmw
Created: 2011-11-13 10:59:31+00:00
State: open

When putting an app to production there is a number of concerns that need to be addressed.
One of the most important concerns is security.
A server that reveals its implementation details will never pass a security audit.
I can see two ways Sinatra is revealing its implementation details - the Server HHTP header and customized error messages.
I'm new to Sinatra and I wonder how do disable both of them?
I understand that most probably it's not Sinatra itself that is adding the HTTP header, but still, it is very important to mention this and to give a reference to some fix.
I'm sure that Preparing for production recipe would be very interesting to have, especially for ones considering Sinatra for serious deployments.