Feature request - cmdline flag to disable/change url for debug pprof endpoints about blackbox_exporter HOT 3 CLOSED

Security scanners often produce false positives. I have not seen any evidence that pprof constitutes an actual vulnerability any more than /metrics.

from blackbox_exporter.

There is no doubt that security scanners report strange things without evidence, but there is certainly one common requirement - at least production environments should not expose extra stuff that is not strictly necessary for operations, so the ability to disable it on demand is always welcome (otherwise users are simply forced into security by obscurity).

from blackbox_exporter.

This is not something we plan to implement here.

from blackbox_exporter.