RE: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
Is it possible to programmatically change the Server header? [...] Surely there is a way to alter the Server header of an HTTP response, if only for security reasons. I can't be the only person who wishes to do this. I would appreciate any suggestions as to how this can be accomplished. Is there another Tomcat mailing list where I can get my question answered, preferably one where Tomcat developers lurk? Nobody here seems to be able to provide answers. thank you, Ian. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
The Server header is hardcoded into the Connectors. You can't remove/change it without a PATCH/recompile to org.apache.coyote.http11.Constants -Tim Ian Stevens wrote: Is it possible to programmatically change the Server header? [...] Surely there is a way to alter the Server header of an HTTP response, if only for security reasons. I can't be the only person who wishes to do this. I would appreciate any suggestions as to how this can be accomplished. Is there another Tomcat mailing list where I can get my question answered, preferably one where Tomcat developers lurk? Nobody here seems to be able to provide answers. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
The Server header is hardcoded into the Connectors. You can't remove/change it without a PATCH/recompile to org.apache.coyote.http11.Constants That's certainly what I saw when looking at the source. There's no way alter it using a javax.servlet.Filter and a javax.servlet.HttpServletResponseWrapper? I tried (see previous messages on this topic) but got nowhere fast. Are there plans to allow the Server header to be altered in the near future? It is certainly a feature I would like to see, both for reasons of security and for limiting the size of the HTTP header for small devices on a rate plan. Ian. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
Unless there is a PATCH in bugzilla, then no. -Tim Ian Stevens wrote: The Server header is hardcoded into the Connectors. You can't remove/change it without a PATCH/recompile to org.apache.coyote.http11.Constants That's certainly what I saw when looking at the source. There's no way alter it using a javax.servlet.Filter and a javax.servlet.HttpServletResponseWrapper? I tried (see previous messages on this topic) but got nowhere fast. Are there plans to allow the Server header to be altered in the near future? It is certainly a feature I would like to see, both for reasons of security and for limiting the size of the HTTP header for small devices on a rate plan. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
Unless there is a PATCH in bugzilla, then no. OK. Thanks for your help, Tim. Ian. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: Using javax.servlet.Filter to alter HTTP headers (was RE: How can the Server header in an HTTP response be customised?)
Is it possible to programmatically change the Server header? Barring that, is it possible to set a Server header for a servlet within its web.xml file? My least preferred method is to change the Server header within Tomcat's server.xml file. I was thinking that a javax.servlet.Filter which intercepts a call to set an HTTP header would do the trick. I wrote a naive Filter (listed below) and added parameters to my web.xml (also shown below) to accomplish this. Its init() and doFilter() methods are called, but the setHeader() method of the HttpServletResponseWrapper is never hit. I also overrode the addHeader() method and added a call to that within my servlet. The addHeader() method in the wrapper gets called, but only when that method is called within the servlet, not from within Tomcat. Surely there is a way to alter the Server header of an HTTP response, if only for security reasons. I can't be the only person who wishes to do this. I would appreciate any suggestions as to how this can be accomplished. thank you, Ian. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
