Server configuration

[chan]

Hi there,

 

Is there a configurable option to update funnelback jetty server on a production environment:

1. disable "HTTP TRACE and OPTIONS" methods

2. less verbose error messages for java runtime exception?

see attached screenshots. 

 

 
exception.png (478 KB)

[gordongrace]

Hi there, chan -

 

Funnelback uses Jetty for rendering the Public UI.  By default, Jetty is configured to disable TRACE methods.

 

Customising Jetty's error messages (500 status codes that may produce stack traces) is an approach you may consider.

 

Alternatively, if you have nginx running above one or more Funnelback query processors, customisation of error messages may be best performed at that level.

[gordongrace]