How to modify or suppress "Server" header and "X-Powered-By" header returned by JBoss EAP 6.x
Issue
- How to achieve the following:
- Change
Serverheader name. - Suppress
X-Powered-Byheader. - Suppress server info on error responses.
- Change
- How to remove the
X-Powered-ByHeader inJBoss? -
JSP version disclosure
While scanning the application URL, displaying jsp version as X-Powered-By: JSP/2.2, please let us know how fix jsp version disclosure findings.
Environment
- Red Hat JBoss Enterprise Application Platform (EAP)
- 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.