@djtechnocrat PCI is about protecting card data. Client side risks count. I do worry about removing info disclosure though, you're right. SecuObs - L'observatoire de la sécurite internet - Site d'informations professionnelles francophone sur la sécurité informatique