Re: removal of product name/version

2008-08-13 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tommy, Tommy Pham wrote: | Thanks all for the reply. Somehow I missed that attribute. Looks | I'll have to define the error-pages. If I specify in the web.xml in | the conf folder, does apply to all web apps deployed for that | host/virtual host?

Re: removal of product name/version

2008-08-13 Thread Mark Thomas
Christopher Schultz wrote: Tommy, Tommy Pham wrote: | Thanks all for the reply. Somehow I missed that attribute. Looks | I'll have to define the error-pages. If I specify in the web.xml in | the conf folder, does apply to all web apps deployed for that | host/virtual host? See also:

RE: removal of product name/version

2008-08-12 Thread Caldarale, Charles R
From: Tommy Pham [mailto:[EMAIL PROTECTED] Subject: removal of product name/version I'm looking for a way to remove the product name and/or version from the server header and default http errors (without defining my own custom error-page). You didn't bother to tell us the Tomcat version

Re: removal of product name/version

2008-08-12 Thread Tim Funk
In server.xml - add a server attribute to the Connector element. [WWW] http://tomcat.apache.org/tomcat-6.0-doc/config/http.html [I just added this to the FAQ] http://wiki.apache.org/tomcat/FAQ/Security#Q9 -Tim Tommy Pham wrote: Hi, I'm looking for a way to remove the product name and/or

Re: removal of product name/version

2008-08-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tommy, Tommy Pham wrote: | I'm looking for a way to remove the product name and/or version from | the server header and default http errors (without defining my own | custom error-page). I know it's possible for apache using | ServerSignature and

Re: removal of product name/version

2008-08-12 Thread Tommy Pham
Hi Chris, --- On Tue, 8/12/08, Christopher Schultz [EMAIL PROTECTED] wrote: Tommy, Tommy Pham wrote: | I'm looking for a way to remove the product name and/or version from | the server header and default http errors (without defining my own | custom error-page). I know it's possible