Hi Mark, It seems that in Tomcat 8 it was added in Tomcat 8.0.23 (merged from Tomcat 7 I guess)
- [image: Add:] 54618 <http://bz.apache.org/bugzilla/show_bug.cgi?id=54618>: Add a new HttpHeaderSecurityFilter that adds the Strict-Transport-Security, X-Frame-Options and X-Content-Type-Options HTTP headers to the response. (markt) And Netbeans embedded version I was using was 8.0.9, I guess that was the problem. On Thu, Sep 8, 2016 at 11:43 AM, Mark Thomas <ma...@apache.org> wrote: > On 08/09/2016 10:12, Mladen Adamović wrote: > > I want in some specific apps to enable HttpHeaderSecurityFilter (I might > > have some insecure applications at the same server). > > <snip/> > > > But I've got the error message when running from Tomcat 8.0.9.0. This > > happened in a development environment, this Tomcat was installed with > > Netbeans 8.0.1. > > > > 08-Sep-2016 09:35:37.108 SEVERE [http-nio-8084-exec-7] > > org.apache.catalina.core.StandardContext.filterStart Exception starting > > filter httpHeaderSecurity > > java.lang.ClassNotFoundException: org.apache.catalina.filters. > > HttpHeaderSecurityFilter > > <snip/> > > > What could be the reason Tomcat is displaying ClassNotFoundExpceiotn for > > org.apache.catalina.filters.HttpHeaderSecurityFilter, since this exists > > since Tomcat 7? > > Read this: > http://svn.us.apache.org/repos/asf/tomcat/tc7.0.x/ > trunk/webapps/docs/changelog.xml > > and this: > http://svn.us.apache.org/repos/asf/tomcat/tc8.0.x/ > trunk/webapps/docs/changelog.xml > > Search for "HttpHeaderSecurityFilter" and read all the matching > changelog entries. > > Mark > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org > For additional commands, e-mail: users-h...@tomcat.apache.org > >
