Hide 'HttpResponseHeaders' (Server Banner and X-Powered-By "JBoss Version")

[geronimo.perez.10]

Here I attached an image to explain better what is the problem I can't resolve. In my opinion this data marked with red is sensitive information that I want to hide to prevent possible attacks or other things. I have already read that JBoss configuration is different from previous versions, so I ask someone who could help me to configure in the right way my files to care this vulnerable information of "MyServer" (JBossAS 7.1.3 Final). I'm using it to deploy a WebApplication with SSL connection...

THANKS YOU A LOT.

REGARDS....

[ctomc]

<jsp-configuration  x-powered-by="false" />

[geronimo.perez.10]

That's okey. I already configured that, but the error page still shows the same "footer description: JBoss Web/7.0.17 Final" , and on the HTTP Response Headers, if you see the Server: Apache Coyote/1.1

I need to hide these information because it's sensible and vulnerable to my application in production environment.

I hope you could help me to solve these as soon as possible. THANKS!

[marc.cortinas]

+1 I think it's interesting to improve the security to hide the footer description: JBoss Web/7.0.17 Final and the Server Header Apache Coyote/1.1