2 Replies Latest reply on Sep 27, 2012 6:10 AM by vmath

How to configure a custom errorReportValveClass in JBoss 7.1.1

vmath Sep 26, 2012 9:04 AM

In previous JBoss versions one can configure a custom errorReportValveClass in server.xml at the host element level (<Host name="localhost" errorReportValveClass="com.amdm.catalina.valves.ErrorReportValve">).

In JBoss 7, such configuration is no more available in the standalone.xml file nor with a system property according to the org.apache.catalina.core.StandardHost class in jbossweb-7.0.16.

So, what's the recommandation to avoid leaking security information through org.apache.catalina.valves.ErrorReportValve in JBoss 7.1.1 ? (Valve configuration can be achieved at application level in the jboss-web.xml but in my case, the valve must be specified at the connector level).

sincerly

Vincent

1. Re: How to configure a custom errorReportValveClass in JBoss 7.1.1

jfclere Sep 27, 2012 4:19 AM (in response to vmath)

It must by defined in the webapp there is no other way for the moment.
Actions
2. Re: How to configure a custom errorReportValveClass in JBoss 7.1.1

vmath Sep 27, 2012 6:10 AM (in response to jfclere)

Thank you for your quick answer, and it seems that such configuration is not planned in a near future ... (https://issues.jboss.org/browse/JBWEB-227)

I have created an feature request for that https://issues.jboss.org/browse/JBWEB-248

sincerly
Vincent MATHON
Actions

Go to original post