One of our customers critized during a security review, that the ZK version number is printed on each page as comment, e.g.
<script type="text/javascript" src="/zkau/web/2e3e2f99/js/zul.lang.wpd" charset="UTF-8"></script> <!-- ZK 6.5.1.1 EE 2012121311 --> <link rel="shortcut icon" type="image/gif" href="/images/abc.gif"/>
The version number should only be visible during development / debugging time.
- relates to
-
ZK-3689 Using org.zkoss.zk.ui.versionInfo.enabled should also make WPDExtendlet hide version to client
- Closed