What was reported:
Issue Bearer/bearer#1114 (closed, 9 comments): <!--- Provide a general summary of the issue in the Title above --> ## Description & Reproduction Upon running the below command for a node.js project ```bash bearer scan . ``` bearer detects `HIGH: Security misconfiguration detected. [CWE-693]` vulnerability. [image] After using [this](https://docs.bearer.com/reference/rules/javascript_express_reduce_fingerprint) and [this](https://stackoverflow.com/questions/10717685/how-to-remove-x-powered-by-in-expressjs) article as reference, I have tried both the below mentioned approaches. ## Approach 1: disabling the header ```javascript app.
What works:
Bearer's javascript_express_reduce_fingerprint rule flags CWE-693 even after you disable the x-powered-by header: the maintainer reproduced it and confirmed it's a bug in the rule itself. Until it's fixed, skipping that rule is the recommended workaround. If Bearer flags a misconfiguration you've already remediated, check whether the rule itself is at fault before changing more code.