web.xml

2017-09-05 Thread Alejandro Vargas M.
Good afternoon, I have a website on a client, and they ran a vulnerability test, and it throws a vulnerability that any user can see web.xml from a web browser, how can I hide to see web.xml or any other file from the browser? Thanks. -- Alejandro Vargas Mayorga /*Gerente Desarrollo C.

Session delete

2017-09-07 Thread Alejandro Vargas M.
Is there anyway to delete a session in Tomcat when the user not logout correctly from the application, normally they not logged out correctly, they just click on the "X" (they said), they click the close button of Internet Explorer. I tried with $(window).unload using JS, but it works on every

Re: tomcat ssl setup

2017-09-19 Thread Alejandro Vargas M.
Do you see what's on the log files, they can tell you what's the problem in. Maybe you can share those files too. I also saw on line 117 this "|||-->|" Looks like there's left over. On 09/19/2017 09:31 AM, John Ellis wrote: I have been trying to setup SSL for tomcat 9.00.M26 on a RHEL (vers

security headers

2017-11-01 Thread Alejandro Vargas M.
Hello,     I recently used on web.xml        httpHeaderSecurity org.apache.catalina.filters.HttpHeaderSecurityFilter     true                 httpHeaderSecurity         /*     to enable some security headers, but it won't enable Content Security Policy header. Is there anyway t

Re: security headers

2017-11-03 Thread Alejandro Vargas M.
You can help with an example of this url-rewrite to add this header, Please, Thanks in advance. On 11/01/2017 02:03 PM, Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Alejandro, On 11/1/17 3:37 PM, Alejandro Vargas M. wrote: Hello, I recently used on web.xml