EAP6 is unable to supress x-powered-by for JSF application

Solution Verified - Updated -


  • Even after following the KCS Article: [0], While running JSP2 based application it is noticed that even if the following configuration is specified inside the "web" subsystem of EAP6 still it shows the "X-Powered-By" header in the Response.
                <jsp-configuration x-powered-by="false"/>
  • Even with the above configuration when a request is sent to the JSF based application then the HTTPResponse is sent by JBoss with the "X-Powered-By" header.

GET /EE6_BeanValidationDemo/welcome.jsf HTTP/1.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:10.0.11) Gecko/20121116 Firefox/10.0.11
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
X-Powered-By: JSF/2.0
Set-Cookie: JSESSIONID=uDMZ5maS4UuqgydzNR1k6RIr; Path=/EE6_BeanValidationDemo
Content-Type: text/html;charset=UTF-8
Content-Length: 515
Date: Fri, 17 May 2013 13:03:22 GMT


  • JBoss Enterprise Application Platform (EAP)
    • 6.x

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content