disable x-powered-by even with csp disabled

follows Express and helmet recommendations

diff --git a/server.ts b/server.ts
index f2e589243aab5ec4ca9f3b17f440184afdd94ecf..8a762a9054ccb7628b8503dfc45b2b9462f3c8f6 100644 (file)
--- a/server.ts
+++ b/server.ts
@@ -20,7 +20,7 @@ import * as cli from 'commander'
 process.title = 'peertube'
 
 // Create our main app
-const app = express()
+const app = express().disable("x-powered-by")
 
 // ----------- Core checker -----------
 import { checkMissedConfig, checkFFmpeg, checkNodeVersion } from './server/initializers/checker-before-init'