File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes JBoss/WildFly and the fly likes eliminate of jboss information in responce Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » JBoss/WildFly
Bookmark "eliminate of jboss information in responce" Watch "eliminate of jboss information in responce" New topic

eliminate of jboss information in responce

fati mirian

Joined: Apr 09, 2008
Posts: 1
Hi friends
I want to change configuration of jboss so that application server information (Servlet 2.4; JBoss-4.2.1.GA (build: SVNTag=JBoss_4_2_1_GA date=200707131605)/Tomcat-5.5) becomes hide from any users.

I think my question lacks clarity.

When I enter http://localhost:8080 in a browser in my machine after running jboss,or when there is an error while calling the specific web service which is deployed on jboss, I can see the following information at response header:

Server: Apache-Coyote/1.1
X-Powered-By: Servlet 2.4; JBoss-4.2.1.GA (build: SVNTag=JBoss_4_2_1_GA date=200707131605)/Tomcat-5.5

I want to customize jboss configuration so that nobody can gain the information about kind of application server and it's version. this is important for security purpose.

I change "X-Powered-BY" in this file "$JBOSS/server/default/deploy/jboss-web.deployer/conf/web.xml" but it wasn't useful.

How to do this ?
Hope my question is clear now.
I agree. Here's the link:
subject: eliminate of jboss information in responce
It's not a secret anymore!