matteocontrini For future version, wouldn't it be useful if Flarum itself exposed the version? It's not a particularly sensitive information IMO, pretty much every forum platform out there exposes the version in the footer or in the source code.
While many forums do share the version someplace it's generally a bad idea. It's not going to cause massive amounts of abuse no. But lets say that we fix a major security issue in say 1.1.5 and the versions affected are everything back to version 1.0.2 (random version numbers) then in theory attackers could create an exploit and then do a massive scan of all forums that are within that range and attack them all quickly, effectively and with extreme precision.
By not including the version number in the code or display it means that the attacker has to try attacking ALL Flarum installs, regardless of whether it's updates or not. It probably wouldn't slow them down all that much, but it might be discouraging to them to see hundreds of sites return with nothing promising and they might just stop trying.
