Hello all, Looking at Tomcat bug 56383 - "Securing ErrorReportValve" ( https://issues.apache.org/bugzilla/show_bug.cgi?id=56383 ), i think a similar thing can also be done for the Tomcat version number reported by the DefaultServlet. This servlet will show the version information from ServerInfo when the listings are enabled. Currently it seems there is no way of disabling version reporting other than 'hacking' the ServerInfo.
For me, it would for sure be a welcome feature to be able to turn this off without losing the version information on the back end process such as logfiles. What's your take on this? Regards, Maarten van Hulsentop
