[jboss-jira] [JBoss JIRA] (JBWEB-248) The default error report class valve should be overridable

[Vincent MATHON (JIRA)]

    [ https://issues.jboss.org/browse/JBWEB-248?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12729360#comment-12729360 ] 

Vincent MATHON commented on JBWEB-248:
--------------------------------------

A simple modification in org.jboss.as.web.WebVirtualHostService might do the trick:

public synchronized void start(StartContext context) throws StartException {
    final StandardHost host = new StandardHost();
    host.setErrorReportValveClass(System.getProperty("org.apache.catalina.valves.ErrorReportValveClass", "org.apache.catalina.valves.ErrorReportValve"));

....
}
        
                
> The default error report class valve should be overridable
> ----------------------------------------------------------
>
>                 Key: JBWEB-248
>                 URL: https://issues.jboss.org/browse/JBWEB-248
>             Project: JBoss Web
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>          Components: Tomcat
>    Affects Versions: JBossWeb-7.0.15.GA, JBossWeb-7.0.16.GA
>            Reporter: Vincent MATHON
>            Assignee: Remy Maucherat
>
> The default error report valve class cannot be configured since JBoss 7.x. 
> The current default implementation (org.apache.catalina.valves.ErrorReportValve) prints the stack trace if any or some server informations. This can be considered as a security issue, so, it would be great to be able to configure a custom error report valve class or at least to be able to filter informations printed by the default one.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira