You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by "Khare, Aparna" <ap...@sap.com> on 2016/02/06 10:32:02 UTC
Sub-Agent in logs telling the version of apache cxf
Dear Colleagues,
We are using apache CXF 3.0.7 and use Webclient to make an outbound HTTP call.
We connect to the external endpoint from our systems .The external system would log from which agent the call is being intercepted.
When a cxf client makes a call the logs are writtern with CXF agent and the version which is a security concern.Can you tell me how to override the agent information.
Best Regards,
Aparna
Re: Sub-Agent in logs telling the version of apache cxf
Posted by Sergey Beryozkin <sb...@gmail.com>.
The docs of the property say "aka User-Agent", so I guess it is safe...
Sergey
On 10/02/16 11:20, Sergey Beryozkin wrote:
> I got it fixed.
> Does someone has any concerns about it ? It does seem User-Agent is how
> a browserType property was meant to be actually represented, as
> User-Agent is a well know header and I can not find any references to
> BrowserType, may be 10-15 years back it was used by some old browsers...
>
> Cheers, Sergey
>
> On 09/02/16 16:45, Sergey Beryozkin wrote:
>> Hi
>>
>> I just tried, the header goes out when it is set on HttpConduit
>> but it is named as 'BrowserType' which looks like a typo because it is
>> documented to be User-Agent, and I can find no links to BrowserType HTTP
>> header (does not exist),
>> I'll fix it shortly
>>
>> Thanks, Sergey
>>
>> On 09/02/16 15:20, Khare, Aparna wrote:
>>> Thanks a lot Sergey.
>>>
>>> I tried both the options
>>> Setting browser type did not work but setting the Sub-Agent in header
>>> worked
>>>
>>> Thanks for the help,
>>> Aparna
>>>
>>> -----Original Message-----
>>> From: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
>>> Sent: Sunday, February 7, 2016 9:46 PM
>>> To: users@cxf.apache.org
>>> Subject: Re: Sub-Agent in logs telling the version of apache cxf
>>>
>>> Hi
>>>
>>> You can customize it, set a User-Agent header when the clients are
>>> created, ex, in jaxrs-client:client/jaxrs-client:headers, or in
>>> JAXRSClientFactoryBean, or directly on WebClient
>>>
>>> Another option is to set it up on HttpConduit, the property is called
>>> 'BrowserType' there.
>>>
>>> HTH, Sergey
>>>
>>>
>>> On 06/02/16 09:32, Khare, Aparna wrote:
>>>> Dear Colleagues,
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> We are using apache CXF 3.0.7 and use Webclient to make an
>>>> outbound HTTP call.
>>>>
>>>>
>>>>
>>>> We connect to the external endpoint from our systems .The external
>>>> system would log from which agent the call is being intercepted.
>>>>
>>>>
>>>>
>>>> When a cxf client makes a call the logs are writtern with CXF agent
>>>> and the version which is a security concern.Can you tell me how to
>>>> override the agent information.
>>>>
>>>>
>>>>
>>>> Best Regards,
>>>>
>>>> Aparna
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
--
Sergey Beryozkin
Talend Community Coders
http://coders.talend.com/
Re: Sub-Agent in logs telling the version of apache cxf
Posted by Sergey Beryozkin <sb...@gmail.com>.
I got it fixed.
Does someone has any concerns about it ? It does seem User-Agent is how
a browserType property was meant to be actually represented, as
User-Agent is a well know header and I can not find any references to
BrowserType, may be 10-15 years back it was used by some old browsers...
Cheers, Sergey
On 09/02/16 16:45, Sergey Beryozkin wrote:
> Hi
>
> I just tried, the header goes out when it is set on HttpConduit
> but it is named as 'BrowserType' which looks like a typo because it is
> documented to be User-Agent, and I can find no links to BrowserType HTTP
> header (does not exist),
> I'll fix it shortly
>
> Thanks, Sergey
>
> On 09/02/16 15:20, Khare, Aparna wrote:
>> Thanks a lot Sergey.
>>
>> I tried both the options
>> Setting browser type did not work but setting the Sub-Agent in header
>> worked
>>
>> Thanks for the help,
>> Aparna
>>
>> -----Original Message-----
>> From: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
>> Sent: Sunday, February 7, 2016 9:46 PM
>> To: users@cxf.apache.org
>> Subject: Re: Sub-Agent in logs telling the version of apache cxf
>>
>> Hi
>>
>> You can customize it, set a User-Agent header when the clients are
>> created, ex, in jaxrs-client:client/jaxrs-client:headers, or in
>> JAXRSClientFactoryBean, or directly on WebClient
>>
>> Another option is to set it up on HttpConduit, the property is called
>> 'BrowserType' there.
>>
>> HTH, Sergey
>>
>>
>> On 06/02/16 09:32, Khare, Aparna wrote:
>>> Dear Colleagues,
>>>
>>>
>>>
>>>
>>>
>>> We are using apache CXF 3.0.7 and use Webclient to make an
>>> outbound HTTP call.
>>>
>>>
>>>
>>> We connect to the external endpoint from our systems .The external
>>> system would log from which agent the call is being intercepted.
>>>
>>>
>>>
>>> When a cxf client makes a call the logs are writtern with CXF agent
>>> and the version which is a security concern.Can you tell me how to
>>> override the agent information.
>>>
>>>
>>>
>>> Best Regards,
>>>
>>> Aparna
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>
>
--
Sergey Beryozkin
Talend Community Coders
http://coders.talend.com/
Re: Sub-Agent in logs telling the version of apache cxf
Posted by Sergey Beryozkin <sb...@gmail.com>.
Hi
I just tried, the header goes out when it is set on HttpConduit
but it is named as 'BrowserType' which looks like a typo because it is
documented to be User-Agent, and I can find no links to BrowserType HTTP
header (does not exist),
I'll fix it shortly
Thanks, Sergey
On 09/02/16 15:20, Khare, Aparna wrote:
> Thanks a lot Sergey.
>
> I tried both the options
> Setting browser type did not work but setting the Sub-Agent in header worked
>
> Thanks for the help,
> Aparna
>
> -----Original Message-----
> From: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
> Sent: Sunday, February 7, 2016 9:46 PM
> To: users@cxf.apache.org
> Subject: Re: Sub-Agent in logs telling the version of apache cxf
>
> Hi
>
> You can customize it, set a User-Agent header when the clients are
> created, ex, in jaxrs-client:client/jaxrs-client:headers, or in
> JAXRSClientFactoryBean, or directly on WebClient
>
> Another option is to set it up on HttpConduit, the property is called
> 'BrowserType' there.
>
> HTH, Sergey
>
>
> On 06/02/16 09:32, Khare, Aparna wrote:
>> Dear Colleagues,
>>
>>
>>
>>
>>
>> We are using apache CXF 3.0.7 and use Webclient to make an outbound HTTP call.
>>
>>
>>
>> We connect to the external endpoint from our systems .The external system would log from which agent the call is being intercepted.
>>
>>
>>
>> When a cxf client makes a call the logs are writtern with CXF agent and the version which is a security concern.Can you tell me how to override the agent information.
>>
>>
>>
>> Best Regards,
>>
>> Aparna
>>
>>
>>
>>
>>
>>
>
>
--
Sergey Beryozkin
Talend Community Coders
http://coders.talend.com/
RE: Sub-Agent in logs telling the version of apache cxf
Posted by "Khare, Aparna" <ap...@sap.com>.
Thanks a lot Sergey.
I tried both the options
Setting browser type did not work but setting the Sub-Agent in header worked
Thanks for the help,
Aparna
-----Original Message-----
From: Sergey Beryozkin [mailto:sberyozkin@gmail.com]
Sent: Sunday, February 7, 2016 9:46 PM
To: users@cxf.apache.org
Subject: Re: Sub-Agent in logs telling the version of apache cxf
Hi
You can customize it, set a User-Agent header when the clients are
created, ex, in jaxrs-client:client/jaxrs-client:headers, or in
JAXRSClientFactoryBean, or directly on WebClient
Another option is to set it up on HttpConduit, the property is called
'BrowserType' there.
HTH, Sergey
On 06/02/16 09:32, Khare, Aparna wrote:
> Dear Colleagues,
>
>
>
>
>
> We are using apache CXF 3.0.7 and use Webclient to make an outbound HTTP call.
>
>
>
> We connect to the external endpoint from our systems .The external system would log from which agent the call is being intercepted.
>
>
>
> When a cxf client makes a call the logs are writtern with CXF agent and the version which is a security concern.Can you tell me how to override the agent information.
>
>
>
> Best Regards,
>
> Aparna
>
>
>
>
>
>
--
Sergey Beryozkin
Talend Community Coders
http://coders.talend.com/
Re: Sub-Agent in logs telling the version of apache cxf
Posted by Sergey Beryozkin <sb...@gmail.com>.
Hi
You can customize it, set a User-Agent header when the clients are
created, ex, in jaxrs-client:client/jaxrs-client:headers, or in
JAXRSClientFactoryBean, or directly on WebClient
Another option is to set it up on HttpConduit, the property is called
'BrowserType' there.
HTH, Sergey
On 06/02/16 09:32, Khare, Aparna wrote:
> Dear Colleagues,
>
>
>
>
>
> We are using apache CXF 3.0.7 and use Webclient to make an outbound HTTP call.
>
>
>
> We connect to the external endpoint from our systems .The external system would log from which agent the call is being intercepted.
>
>
>
> When a cxf client makes a call the logs are writtern with CXF agent and the version which is a security concern.Can you tell me how to override the agent information.
>
>
>
> Best Regards,
>
> Aparna
>
>
>
>
>
>
--
Sergey Beryozkin
Talend Community Coders
http://coders.talend.com/