https://bz.apache.org/bugzilla/show_bug.cgi?id=58750

--- Comment #15 from Mark Thomas <ma...@apache.org> ---
Ignoring the reasoning isn't a red herring. It is part of deciding what the
best solution is. "Because someone wants it" is not, on its own, sufficient
justification.

The patch looks like a good start if we wanted to go that way. It needs some
docs.

However, I'm still leaning towards removing all server header handling from
Tomcat. That gives users - including boot - maximum flexibility. They can
add/remove the header as desired via the Servlet API. We can remove the server
option completely in 9.0.x. In 8.0.x and earlier I think we'd need to set the
header if the option is set to retain backwards compatibility. Essentially that
changes Tomcat's default behaviour from sending the header to not sending it.

In the (unlikely) case of an app setting the header that the system
administrator wants to remove, the sys admin would need to add a filter that
removed the header.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to