You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@tomcat.apache.org by ro...@zzict.nl on 2000/11/08 04:25:37 UTC

modifying response headers

Yo,
is there a clean way (without modifying source code) to modify the
response headers from tomcat?
right now, they give away to much information methinks:

Servlet-Engine: Tomcat Web Server/3.1 (JSP 1.1; Servlet 2.2; Java
1.2.2; Linux 2.2.15-4mdksmp i386; java.vendor=Sun Microsystems Inc.)

(this info is dumped into the HTTP response by 
/org/apache/tomcat/request/FixHeaders.java )

I want to be able to strip this so that no banner grabbing will expose
my server OS  and version.

TIA,
Sloot.