You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by Jim Manico <ji...@manico.net> on 2008/07/26 01:24:24 UTC

Tomcat Server Header Change

I would like to change Tomcat so that configuring the Connector to 
server="" will completely remove the Server header. This used to be the 
base before the header customization code was put in place. Does anyone 
have a strong objection, if not, I'll add a bug for it in bugzilla and 
provide a patch.

-- 
Jim Manico, Senior Application Security Engineer
jim.manico@aspectsecurity.com | jim@manico.net
(301) 604-4882 (work)
(808) 652-3805 (cell)

Aspect Security™
Securing your applications at the source
http://www.aspectsecurity.com

---------------------------------------------------------------
Management, Developers, Security Professionals ...
... can only result in one thing. BETTER SECURITY.
http://www.owasp.org/index.php/OWASP_NYC_AppSec_2008_Conference  
Sept 22nd-25th 2008



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Re: Tomcat Server Header Change

Posted by Mark Thomas <ma...@apache.org>.
Jim Manico wrote:
> I would like to change Tomcat so that configuring the Connector to 
> server="" will completely remove the Server header. This used to be the 
> base before the header customization code was put in place. Does anyone 
> have a strong objection, if not, I'll add a bug for it in bugzilla and 
> provide a patch.

Go for it.

Mark



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org