Author: violetagg
Date: Thu May 8 07:55:35 2014
New Revision: 1593200
URL: http://svn.apache.org/r1593200
Log:
Fix https://issues.apache.org/bugzilla/show_bug.cgi?id=56383
Document ErrorReportValve's new property 'showReport' on the "security HowTO"
page.
Modified:
tomcat/trunk/webapps/docs/security-howto.xml
Modified: tomcat/trunk/webapps/docs/security-howto.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/security-howto.xml?rev=1593200&r1=1593199&r2=1593200&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/security-howto.xml (original)
+++ tomcat/trunk/webapps/docs/security-howto.xml Thu May 8 07:55:35 2014
@@ -362,7 +362,9 @@
<p>The default ErrorReportValve can display stack traces and/or JSP
source code to clients when an error occurs. To avoid this, custom error
- handling can be configured within each web application.</p>
+ handling can be configured within each web application. Alternatively,
you
+ can explicitly configure an <a
href="config/valve.html">ErrorReportValve</a>
+ and set its <strong>showReport</strong> attribute to
<code>false</code>.</p>
</subsection>
<subsection name="Realms">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
