users@glassfish.java.net

Re: RE: Obfuscation: How to disable optional http header fields in glassfish 3.0.1

From: <glassfish_at_javadesktop.org>
Date: Mon, 13 Sep 2010 09:51:18 PDT

Hi buddy,

the url https://www.mydomain.com:4848/common/index.jsf is the admin web frontend of glassfish. And of course I am checking port 80.

getting rid of "server" field in the http header with

[b]asadmin create-jvm-options -Dproduct.name=""[/b]

or with admin web frontend seems to help.

I can get rid of [b]"X-Powered-By: Servlet/3.0"[/b] but there seems not to be any chance to get rid of [b]"X-Powered-By: JSP/2.1"[/b]

so the open question is: [b]How to get rid of "X-Powered-By: JSP/2.1"[/b]?

thanks anyway...
[Message sent by forum member 'nabizamani']

http://forums.java.net/jive/thread.jspa?messageID=482539