2014-04-23 18:32 GMT+04:00 Maarten van Hulsentop <maar...@vanhulsentop.nl>: > Hello all, > > Looking at Tomcat bug 56383 - "Securing ErrorReportValve" ( > https://issues.apache.org/bugzilla/show_bug.cgi?id=56383 ), i think a > similar thing can also be done for the Tomcat version number reported by > the DefaultServlet. > This servlet will show the version information from ServerInfo when the > listings are enabled. Currently it seems there is no way of disabling > version reporting other than 'hacking' the ServerInfo.
It is possible to apply an XSLT and tune the listing to your liking. > For me, it would for sure be a welcome feature to be able to turn this off > without losing the version information on the back end process such as > logfiles. > > What's your take on this? I filed https://issues.apache.org/bugzilla/show_bug.cgi?id=56463 Patches are welcome. Best regards, Konstantin Kolinko --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
