[jboss-user] [Beginners Corner] - Re: hide server version details from http requests

[jaikiran]

In the %JBOSS_HOME%\server\< serverName>\deploy\jbossweb-tomcatXX.sar\conf\web.xml file, there's a filter mapping:

  |  <filter>
  |       <filter-name>CommonHeadersFilter</filter-name>
  |       <filter-class>org.jboss.web.tomcat.filters.ReplyHeaderFilter</filter-class>
  |       <init-param>
  |          <param-name>X-Powered-By</param-name>
  |          <param-value>Servlet 2.4; JBoss-4.0.5.GA (build: CVSTag=Branch_4_0 date=200610162339)/Tomcat-5.5</param-value>
  |       </init-param>
  |    </filter>
  | 
  |    <filter-mapping>
  |       <filter-name>CommonHeadersFilter</filter-name>
  |       <url-pattern>/*</url-pattern>
  |    </filter-mapping>

Try removing this entire section or maybe just the init-param (I haven't tried so don't exactly know whether removing the entire filter mapping will cause any issues).


 

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4178682#4178682

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4178682