tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Polina Genova <polina.gen...@gmail.com>
Subject Re: Proposal for the system information displayed by the default error handling of Tomcat
Date Wed, 29 Jun 2011 16:01:20 GMT
Hi all,



I'm curious if you find the idea below reasonable.

If so, I'll gladly provide patch for it.



Thank you for your attention,

Polina
On Wed, Jun 22, 2011 at 8:02 AM, Polina Genova <polina.genova@gmail.com>wrote:

> Hi,
>
> Currently the Tomcat security documentation says that the server
> information displayed in the default error pages can be configured through
> the ‘CATALINA_HOME/lib/org/apache/catalina/util/ SystemInfo.properties’
> file.
>
> I think it makes sense, to use the server attribute value of HTTP connector
> configuration in the server.xml (if such attribute is set) instead reading
> the property from the ‘SystemInfo.properties’. Thus the system information
> returned in the server header and in the default error page would be
> consistent. Besides, I cannot think of any situation in which these two
> configurations may differ. That’s why such a change seems reasonable to me
> and would lighten a bit the steps of security configurations.
>
> If you like the idea, I can provide a patch for it?
>
> Thanks and regards,
>
> Polina
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message