This is an automated email from the ASF dual-hosted git repository.
markt pushed a commit to branch 8.5.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git
The following commit(s) were added to refs/heads/8.5.x by this push:
new 88f097b Correct description of default value of server attribute
88f097b is described below
commit 88f097b6a8601cf38eff99e453a98d9338b0bfe9
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Thu Oct 31 21:18:42 2019 +0100
Correct description of default value of server attribute
---
webapps/docs/changelog.xml | 8 ++++++++
webapps/docs/security-howto.xml | 5 +++--
2 files changed, 11 insertions(+), 2 deletions(-)
diff --git a/webapps/docs/changelog.xml b/webapps/docs/changelog.xml
index 76b6c18..ee822dc 100644
--- a/webapps/docs/changelog.xml
+++ b/webapps/docs/changelog.xml
@@ -95,6 +95,14 @@
</fix>
</changelog>
</subsection>
+ <subsection name="Web applications">
+ <changelog>
+ <fix>
+ Correct the description of the default value for the server attribute
in
+ the security How-To. (markt)
+ </fix>
+ </changelog>
+ </subsection>
<subsection name="Other">
<changelog>
<fix>
diff --git a/webapps/docs/security-howto.xml b/webapps/docs/security-howto.xml
index ad38953..bd6ba71 100644
--- a/webapps/docs/security-howto.xml
+++ b/webapps/docs/security-howto.xml
@@ -286,8 +286,9 @@
<p>The <strong>server</strong> attribute controls the value of the Server
HTTP header. The default value of this header for Tomcat 4.1.x to
- <version-major-minor/>.x is Apache-Coyote/1.1. This header can provide
- limited information to both legitimate clients and attackers.</p>
+ 8.0.x is Apache-Coyote/1.1. From 8.5.x onwards this header is not set by
+ default. This header can provide limited information to both legitimate
+ clients and attackers.</p>
<p>The <strong>SSLEnabled</strong>, <strong>scheme</strong> and
<strong>secure</strong> attributes may all be independently set. These
are
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
