ue, I
disagree that my priorities are *all* wrong. (tongue-in-cheek) The compliance
deadline looms a bit close to allow time for staging and regression testing.
(panicked)
Ironically, the scan said nothing about the Tomcat version itself:
"The remote web server contains default files.
Leon, Mark, and Alejandro
Thanks for your time and suggestions. I appreciate it.
cjb> We are getting dinged by a vulnerability scan for the default
cjb> not-found error page being returned by Tomcat for a Status 404.
cjb> [...]
cjb> However, I can't find where the error-page for 404 is defined.
-Original Message-
From: Mark Thomas [mailto:ma...@apache.org]
Sent: Wednesday, May 2, 2018 4:01 PM
To: users@tomcat.apache.org
Subject: Re: tomcat 6 vulnerability scan default error page help
> On 02/05/18 20:51, Leon Rosenberg wrote:
> > Hi Mark,
> >
> > I ag
You need to unpack catalina.jar in tomcat lib directory,
then go to org\apache\catalina\util\,
open ServerInfo.properties and edit it
server.info=Apache Tomcat
server.number=
server.built=
You need to set to empty these variables, as shown above.
Save the file.
Pack as jar again
Put in the tom
t for.
Don't get me started on PCI compliance...
Oh, and Cris - take a look at the ErrorReportValve. That is where the
default error page is coming from.
Mark
>
> regards
> Leon
>
> On Wed, May 2, 2018 at 9:42 PM, Mark Thomas wrote:
>
>> On 02/05/18 20:27, Bernebu
Hi Mark,
I agree with you that the complaint about version number is rather a minor
one, however, I've had the same situation as one of our projects had to
pass through a PCI Compliance test, and this is what they really test for.
regards
Leon
On Wed, May 2, 2018 at 9:42 PM, Mark Thomas wrote:
On 02/05/18 20:27, Berneburg, Cris J. - US wrote:
> We are getting dinged by a vulnerability scan for the default not-found error
> page being returned by Tomcat for a Status 404.
>
> On my dev server when requesting an invalid URL, Tomcat returns a Status 404
> page that displays the Tomcat ver
Hi Cris,
try to add following to your web.xml
404
/error404.html
regards
Leon
On Wed, May 2, 2018 at 9:27 PM, Berneburg, Cris J. - US wrote:
> We are getting dinged by a vulnerability scan for the default not-found
> error page being returned by Tomcat for a Status
We are getting dinged by a vulnerability scan for the default not-found error
page being returned by Tomcat for a Status 404.
On my dev server when requesting an invalid URL, Tomcat returns a Status 404
page that displays the Tomcat version. Right, I need to do something about
that.
However,
> From: shmol...@gmail.com [mailto:shmol...@gmail.com] On Behalf Of Jonathan
> Rosenberg
> Subject: Re: Global Default Error Page
> I configured this error page in conf/web.xml. Seemed like this made
> the most sense.
Not sure about that. Whatever you put in conf/web.xml
rles R wrote:
>>> From: Jonathan Rosenberg [mailto:shmol...@gmail.com]
>>> Subject: Global Default Error Page
>>
>>> How can I create a custom 404 error page for the case where
>>> the URL maps to a non-existent webapp?
>>
>> *All* URLs map to a
On 22/03/2011 15:07, Caldarale, Charles R wrote:
>> From: Jonathan Rosenberg [mailto:shmol...@gmail.com]
>> Subject: Global Default Error Page
>
>> How can I create a custom 404 error page for the case where
>> the URL maps to a non-existent webapp?
>
> *All* U
> From: Jonathan Rosenberg [mailto:shmol...@gmail.com]
> Subject: Global Default Error Page
> How can I create a custom 404 error page for the case where
> the URL maps to a non-existent webapp?
*All* URLs map to a webapp, even if it's the default (ROOT) one. Put your
cus
istent webapp?
>
> I know how to do this for an individual webapp, but can't figure put
> where the "global default" error page comes from.
>
--
"Hell hath no limits, nor is circumscrib'd In one self-place; but where we
are is hell, And where hell is, t
How can I create a custom 404 error page for the case where the URL
maps to a non-existent webapp?
I know how to do this for an individual webapp, but can't figure put
where the "global default" error page comes from.
--
Jonathan Rosenberg
Founder & Executive Director
T
massive.boisson wrote:
Thank you sir, that works!
It can't be used it in the US however, because that was obviously an
insider tip.
markt-2 wrote:
Create the following directory structure under CATALINA_BASE/lib:
org/apache/catalina/util
Download the following file and place it in that d
..@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>
>
--
View this message in context:
http://old.nabble.com/Hide-Tomcat-Version-From-Default-Error-Page-tp27180665p27183101.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
On 15/01/2010 19:44, massive.boisson wrote:
>
> Yes, that's it.
>
> I do have custom page defined in web.xml with , but it is
> theoretically possible to still get Tomcat exception, if for example somehow
> it was thrown within the custom error page.
>
> So I am just trying to avoid this unlik
> From: massive.boisson [mailto:massive.bois...@gmail.com]
> Subject: Re: Hide Tomcat Version From Default Error Page
>
> I thought maybe there is a request parameter I can modify in these
> situations that stores the version number.
To completely eliminate the Tomcat version l
assive.boisson [mailto:massive.bois...@gmail.com] Subject:
>>> RE: Hide Tomcat Version From Default Error Page
>>>
>>> I still get: Apache Tomcat/6.0.20 at the bottom.
>>
>> Bottom of what? The server attribute of controls the
>> content of the Server HTTP
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Chuck,
On 1/15/2010 1:36 PM, Caldarale, Charles R wrote:
>> From: massive.boisson [mailto:massive.bois...@gmail.com] Subject:
>> RE: Hide Tomcat Version From Default Error Page
>>
>> I still get: Apache Tomcat/6.0.20 at th
> From: massive.boisson [mailto:massive.bois...@gmail.com]
> Subject: RE: Hide Tomcat Version From Default Error Page
>
> I still get: Apache Tomcat/6.0.20 at the bottom.
Bottom of what? The server attribute of controls the content of
the Server HTTP header, nothing else. I
Hi, thanks,
I tried both:
and
But it does not work, I still get: Apache Tomcat/6.0.20 at the bottom.
Am I doing something wrong?
Thanks
--MB
n828cl wrote:
>
>> From: massive.boisson [mailto:massive.bois...@gmail.com]
>> Subject: Hide Tomcat Version From Def
> From: massive.boisson [mailto:massive.bois...@gmail.com]
> Subject: Hide Tomcat Version From Default Error Page
>
> I read that I can hide server version ("Apache Tomcat/6.0.20") by some
> setting in server.xml / Connector on version 6.0.20.
The paranoid among us
Any ideas?
Thanks
--MB
--
View this message in context:
http://old.nabble.com/Hide-Tomcat-Version-From-Default-Error-Page-tp27180665p27180665.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
To unsubscri
On 16/11/2009 19:00, Konstantin Kolinko wrote:
2009/11/16 Arunkumar Janarthanan:
Thank you very much for the info Konstantin, is this applicable to Tomcat
5.5.9 ? that is the version we are using.
Sure, because this issue is an old one. I would even say that
that is by design.
Also, there mig
Hi Konstantin,
Thank you very much,I will look for the fix or an alternate option to fix
the issue.
Once again many thanks.
Cheers,
Arun Janarthanan
On Mon, Nov 16, 2009 at 2:00 PM, Konstantin Kolinko
wrote:
> 2009/11/16 Arunkumar Janarthanan :
> > Thank you very much for the info Konstantin,
2009/11/16 Arunkumar Janarthanan :
> Thank you very much for the info Konstantin, is this applicable to Tomcat
> 5.5.9 ? that is the version we are using.
Sure, because this issue is an old one. I would even say that
that is by design.
Also, there might be a lot of other issues in 5.5.9,
as well
mar Janarthanan :
> > I am having problem when thew webapp stopped or not loaded for some
> reason
> > tomcat shows the default error page though I have error page configured
> in
> > web.xml under application root.
> >
> > Do I have to modify "*org.apache.cata
2009/11/15 Arunkumar Janarthanan :
> I am having problem when thew webapp stopped or not loaded for some reason
> tomcat shows the default error page though I have error page configured in
> web.xml under application root.
>
> Do I have to modify "*org.apache.catalina.valves.
I am having problem when thew webapp stopped or not loaded for some reason
tomcat shows the default error page though I have error page configured in
web.xml under application root.
Do I have to modify "*org.apache.catalina.valves.ErrorDispatcherValve*"
class file ?
Could anyone please
t
已发送： 2008/10/17(周五), 下午6:05:25
主题： Re: about tomcat default error page
Hi 李征,
I don't know the answer to your question, but here is a recommendation :
To avoid delays in answering your question, it is always helpful to
specify :
- on which platform this happens (Windows, Unix, Linux,..)
- what
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
李征,
李征 wrote:
> i use apache with tomcat.
> i don't want tomcat to generate its default error page when a error happens.
> instead, i want to show my error page which i set in the apache conf file.
>
> i know that i can use to
lease notes of mod_jk. I am not sure, but I think I remember seeing
something that was more or less around that subject.
André
李征 wrote:
> i use apache with tomcat.
> i don't want tomcat to generate its default error page when a error happens.
> instead, i want to show my error page
i use apache with tomcat.
i don't want tomcat to generate its default error page when a error happens.
instead, i want to show my error page which i set in the apache conf file.
i know that i can use to do this, but i don't want to do it twice
-- both apache and tomcat.
is
not actually overriding catalina.jar proprely.
Thanks,
Raghu
On Wed, Aug 13, 2008 at 1:02 PM, Caldarale, Charles R <
[EMAIL PROTECTED]> wrote:
> > From: Raghavendra Datt [mailto:[EMAIL PROTECTED]
> > Subject: Re: Default error page generation logic in tomcat
> >
> >
> From: Raghavendra Datt [mailto:[EMAIL PROTECTED]
> Subject: Re: Default error page generation logic in tomcat
>
> I have this tomcat running on linux and I don't find
> catalina.properties any where in the tomcat folders.
A red flag just went up. Are you using a real To
wrote:
>
>> Hi Guys,
>> I had a specific requirement related to tomcat error generation. When a
>> default error page is generated like 404 error page, tomcat appends its
>> version info at the bottom of the page. I don't want this version to be
>> displayed on the
Raghavendra Datt wrote:
Hi Guys,
I had a specific requirement related to tomcat error generation. When a
default error page is generated like 404 error page, tomcat appends its
version info at the bottom of the page. I don't want this version to be
displayed on the error page. I am tryi
@tomcat.apache.org
Subject: Default error page generation logic in tomcat
Hi Guys,
I had a specific requirement related to tomcat error generation. When a
default error page is generated like 404 error page, tomcat appends its
version info at the bottom of the page. I don't want this version to be
disp
Hi Guys,
I had a specific requirement related to tomcat error generation. When a
default error page is generated like 404 error page, tomcat appends its
version info at the bottom of the page. I don't want this version to be
displayed on the error page. I am trying to understand which pa
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Arend,
Arend P. van der Veen wrote:
> The problem is that I must include seperate entries
> for each error-code. Is there a way of catching all of the errors with
> one error code?
No.
> I have the same question for exception catching.
Yes:
Hi,
I have been looking through the documentation to see if it is possible
to change the default error pages in tomcat. For example, I currently
have entries like
404
/error.html
in my web.xml file. The problem is that I must include seperate entries
for each error-code. Is
43 matches
Mail list logo
