Author: kkolinko Date: Sun Nov 7 19:07:45 2010 New Revision: 1032350 URL: http://svn.apache.org/viewvc?rev=1032350&view=rev Log: Write attribute names in bold.
Modified: tomcat/trunk/webapps/docs/security-howto.xml Modified: tomcat/trunk/webapps/docs/security-howto.xml URL: http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/security-howto.xml?rev=1032350&r1=1032349&r2=1032350&view=diff ============================================================================== --- tomcat/trunk/webapps/docs/security-howto.xml (original) +++ tomcat/trunk/webapps/docs/security-howto.xml Sun Nov 7 19:07:45 2010 @@ -216,7 +216,7 @@ <p>Any administrative application should be protected by a RemoteAddressValve. (Note that this Valve is also available as a Filter.) - The allow attribute should be used to limit access to a set of known + The <strong>allow</strong> attribute should be used to limit access to a set of known trusted hosts.</p> <p>The default ErrorReportValve includes the Tomcat version number in the @@ -261,7 +261,7 @@ server.info=Apache Tomcat/7.0.x <subsection name="Manager"> <p>The manager component is used to generate session IDs.</p> - <p>The default entropy value has been shown to generate predictable values + <p>The default <strong>entropy</strong> value has been shown to generate predictable values under certain conditions. For more secure session generation, this should be set to a long string. This is done automatically if the APR/native library is installed; a random value will be obtained from the APR/native --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org