[
https://issues.apache.org/jira/browse/FELIX-4983?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14648756#comment-14648756
]
Carsten Ziegeler commented on FELIX-4983:
-----------------------------------------
Jetty 9.3.x requires Java 8, most of our users are still on Java 7
> To prevent server information disclosure on error page, jetty 9.3.2 should be
> used
> ----------------------------------------------------------------------------------
>
> Key: FELIX-4983
> URL: https://issues.apache.org/jira/browse/FELIX-4983
> Project: Felix
> Issue Type: Bug
> Components: HTTP Service
> Affects Versions: http.jetty-3.0.2
> Reporter: Adrien PAILHES
>
> According to this commit:
> https://github.com/eclipse/jetty.project/commit/6428718962b26ece54736da897ac9755eda265e2
> jetty information is no more used in ErrorHandler (aka Jetty.POWERED_BY_HTML
> is removed).
> So, for security purpose(information disclosure threat), it would be usefull
> to use jetty 9.3.2.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
