You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2012/11/23 20:26:01 UTC

[Bug 54197] New: Add option to disable the display of Tomcat name and version in HTTP errror messages

https://issues.apache.org/bugzilla/show_bug.cgi?id=54197

            Bug ID: 54197
           Summary: Add option to disable the display of Tomcat name and
                    version in HTTP errror messages
           Product: Tomcat 7
           Version: 7.0.33
          Hardware: PC
                OS: Windows XP
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Catalina
          Assignee: dev@tomcat.apache.org
          Reporter: rapolu@hawaii.edu
    Classification: Unclassified

Tomcat displays the server name and version in HTTP error messages. This may be
undesirable for security reasons etc. The Open Web Application Security Project
(OWASP) recommends editing the ServerInfo.properties file in catalina.jar. It
would be lot more convenient if there is some way to disable the above from the
configuration.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

[Bug 54197] Add option to disable the display of Tomcat name and version in HTTP errror messages

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=54197

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from Mark Thomas <ma...@apache.org> ---
There are multiple ways to do this. The users list is the place to seek advice
on different options if you require it. Editing ServerInfo.properties file in
catalina.jar is by far the most awkward way of doing this (but it does work).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org