Author: violetagg
Date: Thu May 8 07:57:08 2014
New Revision: 1593201
URL: http://svn.apache.org/r1593201
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=56383
Merged revision(s) 1593200 from tomcat/trunk:
Document ErrorReportValve's new property 'showReport' on the "security HowTO"
page.
Modified:
tomcat/tc7.0.x/trunk/ (props changed)
tomcat/tc7.0.x/trunk/webapps/docs/security-howto.xml
Propchange: tomcat/tc7.0.x/trunk/
------------------------------------------------------------------------------
Merged /tomcat/trunk:r1593200
Modified: tomcat/tc7.0.x/trunk/webapps/docs/security-howto.xml
URL:
http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/security-howto.xml?rev=1593201&r1=1593200&r2=1593201&view=diff
==============================================================================
--- tomcat/tc7.0.x/trunk/webapps/docs/security-howto.xml (original)
+++ tomcat/tc7.0.x/trunk/webapps/docs/security-howto.xml Thu May 8 07:57:08
2014
@@ -365,7 +365,9 @@ server.info=Apache Tomcat/7.0.x
<p>The default ErrorReportValve can display stack traces and/or JSP
source code to clients when an error occurs. To avoid this, custom error
- handling can be configured within each web application.</p>
+ handling can be configured within each web application. Alternatively,
you
+ can explicitly configure an <a
href="config/valve.html">ErrorReportValve</a>
+ and set its <strong>showReport</strong> attribute to
<code>false</code>.</p>
</subsection>
<subsection name="Realms">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
