How to prevent redirect to Tomcat error page

Joakim Sahlgren

When the URL contains a null byte (%00) in the URL parameter, the Tomcat error page will be displayed. This page includes the Tomcat server version.

Example: https://myhostname?page=

Is it possible to hide the server information and version on this page or redirect to the 'not found' page?

I have tried the following steps:

1. Stop Confluence.

2. Unpack the catalina.jar file: 

jar xf catalina.jar org/apache/catalina/util/ServerInfo.properties

3. Update the ServerInfo.properties file by changing the server.info line to server.info=X.

4. Repackage the catalina.jar file:

jar uf catalina.jar org/apache/catalina/util/ServerInfo.properties

5. Start Confluence.

The Confluence server will start and the updated info will be displayed. However, the change will cause the instance health check to fail and multiple exceptions are logged in catalina.out.

The updated catalina.jar file has the same owner and permissions as the original file. When I restore the original file and restart Confluence, the instance health check will pass again.

 

Danyal Iqbal

I would run confluence behind a reverse proxy(apache) and redirect apache to a custom error page, instead of hacking the jar archives or

create the file lib\org\apache\catalina\util\ServerInfo.properties and add server.info=Apache Tomcat Version X to it. Restart tomcat/confluence.

or edit the /web.xml to capture the http code and show your custom error.html. Please See https://confluence.atlassian.com/confkb/how-to-customize-the-page-not-found-404-page-720412489.html for further reference.