chan
July 15, 2014, 10:34pm
1
Hi there,
Is there a configurable option to update funnelback jetty server on a production environment:
1. disable "HTTP TRACE and OPTIONS" methods
2. less verbose error messages for java runtime exception?
see attached screenshots.
exception.png (478 KB)
Hi there, chan -
Funnelback uses Jetty for rendering the Public UI. By default, Jetty is configured to disable TRACE methods.
Customising Jetty's error messages (500 status codes that may produce stack traces ) is an approach you may consider.
Alternatively, if you have nginx running above one or more Funnelback query processors, customisation of error messages may be best performed at that level.