Joe,
> Am 02.04.2022 um 00:53 schrieb Joseph Michaud <[email protected]>:
>
> As I understand it, an ErrorReportValve is an application-level filter. An
> HTTP request error (like an unknown URL) that reaches it will be processed.
> With the ErrorReportValve I can modify the information presented in the
> report. However, an *invalid* URL is not assignable to any application. No
> ErrorReportValve would apply to it.
>
> An invalid URL generates a 400 response. In Tomcat 8.5, there was no error
> report included in that response. In Tomcat 9.0, the default error report is
> included. The default error report includes Tomcat version information.
> Some security-conscious customers don't want version information displayed
> but now, with Tomcat 9.0, I cannot remove that information.
>
> I think the answer is 'no', but I'll ask anyway.... Is there a global-level
> ErrorReportValve capability? Or some facility to easily remove the version
> information from an 'invalid URL' error report? (I'm aware of modifying the
> ServerInfo.properties file, but that affects more than just the error
> report...)
>
this goes in server.xml like this
<Host name="localhost" appBase="webapps"
unpackWARs="false" autoDeploy="false" deployXML="true">
<Valve className="org.apache.catalina.valves.ErrorReportValve"
showReport="false" showServerInfo="false" />
</Host>
you may also add
errorReportValveClass="com.logo.tomcat.valves.CustomErrorReportValve" to the
host attributes.
Hope this helps
Peter
> Joe
>
> We hope you found this email of interest; however, click here if you wish to
> unsubscribe<http://www2.smartbear.com/SubscriptionCenter.html?utm_source=outlook&utm_medium=email&utm_content=emailsig>
> or manage your email preferences. Privacy
> Policy.<https://smartbear.com/privacy/>
>
> Disclaimer
>
> The information contained in this communication from the sender is
> confidential. It is intended solely for use by the recipient and others
> authorized to receive it. If you are not the recipient, you are hereby
> notified that any disclosure, copying, distribution or taking action in
> relation of the contents of this information is strictly prohibited and may
> be unlawful.
>
