[wp-trac] [WordPress Trac] #64613: Add HTTP header declaring theme, plugins, blocks, and possibly patterns on each page

[WordPress Trac]

#64613: Add HTTP header declaring theme, plugins, blocks, and possibly patterns on
each page
-----------------------------+------------------------------
 Reporter:  paolal           |       Owner:  (none)
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  AI               |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by siliconforks):

 Replying to [comment:1 westonruter]:
 > My first thought is that some site owners would be concerned about
 revealing "how the sausage is made" by exposing all of the information
 about what theme, plugins, and blocks are used to construct a page. I see
 there is an opt-out in the proposal, but I wonder if enabling this by
 default would be a big red flag for users who are concerned about exposing
 this information.

 Yes, listing all the plugins that are active on a WordPress site seems
 like a bad idea.  This is information that attackers are often interested
 in: https://www.wordfence.com/learn/how-to-protect-yourself-from-
 wordpress-security-issues/#how-are-they-attacking-my-wordpress-site

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64613#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform