files/zh-tw/web/http/headers/server/index.html


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

---
title: Server
slug: Web/HTTP/Headers/Server
translation_of: Web/HTTP/Headers/Server
---
<div>{{HTTPSidebar}}</div>

<p><span class="seoSummary"><code><strong>Server</strong></code> 標頭描述處理請求的伺服器軟體資訊：也就是產生回應的伺服器資訊。</span></p>

<div class="blockIndicator warning">
<p>請避免 Server 值的資訊過度冗長與詳盡，因為它們可能會洩漏實做細節、讓攻擊者容易找到已知安全漏洞並利用之。</p>
</div>


<table class="properties">
 <tbody>
  <tr>
   <th scope="row">標頭類型</th>
   <td>{{Glossary("Response header")}}</td>
  </tr>
  <tr>
   <th scope="row">{{Glossary("Forbidden header name")}}</th>
   <td>否</td>
  </tr>
 </tbody>
</table>

<h2 id="語法">語法</h2>

<pre class="syntaxbox">Server: &lt;product&gt;
</pre>

<h2 id="指令">指令</h2>

<dl>
 <dt>&lt;product&gt;</dt>
 <dd>處理請求的軟體（或組件）名。語法通常與 {{HTTPHeader('User-Agent')}} 相似。</dd>
</dl>

<p>How much detail to include is an interesting balance to strike; exposing the OS version is probably a bad idea, as mentioned in the earlier warning about overly-detailed values. However, exposed Apache versions helped browsers work around a bug those versions had with {{HTTPHeader('Content-Encoding')}} combined with {{HTTPHeader('Range')}}.</p>

<h2 id="示例">示例</h2>

<pre>Server: Apache/2.4.1 (Unix)</pre>

<h2 id="規範">規範</h2>

<table class="standard-table">
 <tbody>
  <tr>
   <th scope="col">規範</th>
   <th scope="col">標題</th>
  </tr>
  <tr>
   <td>{{RFC("7231", "Server", "7.4.2")}}</td>
   <td>Hypertext Transfer Protocol (HTTP/1.1)：語意化及內容</td>
  </tr>
 </tbody>
</table>

<h2 id="瀏覽器相容性">瀏覽器相容性</h2>

<p>{{Compat("http.headers.Server")}}</p>

<h2 id="參見">參見</h2>

<ul>
 <li>{{HTTPHeader("Allow")}}</li>
</ul>