B4J Question Possible to remove the HTTP Server header version in Jetty ?

[Luk]

Hi,

Is it possible to remove the HTTP Server header version in Jetty ? Why ?
Some security analysis software (and colleagues ) will flag sending the server version in the response header as an issue.

This java code should do it, but I don't know how this can be done in B4J

HttpConfiguration httpConfig =newHttpConfiguration();
httpConfig.setSendServerVersion(false);
HttpConnectionFactory httpFactory =newHttpConnectionFactory( httpConfig );
ServerConnector httpConnector =newServerConnector( server,httpFactory );

Thanks.
Luk

 

[Erel]

Call this sub after the server is started:

Private Sub RemoveServerVersionFromResponses (Server As Server)
   Dim jo As JavaObject = Server
   jo = jo.GetField("server")
   Dim connectors() As Object = jo.RunMethod("getConnectors", Null)
   For Each co As JavaObject In connectors
     Dim connections() As Object = co.RunMethodJO("getConnectionFactories", Null).RunMethod("toArray", Null)
     For Each connection As JavaObject In connections
       If GetType(connection) = "org.eclipse.jetty.server.HttpConnectionFactory" Then
         Dim configuration As JavaObject = connection.RunMethod("getHttpConfiguration", Null)
         configuration.RunMethod("setSendServerVersion", Array(False))
       End If
     Next
   Next
End Sub

 

[billzhan]

' should be something like

Private Sub RemoveServerVersionFromResponses (Server1 As Server)
       Dim jo AsJavaObject = Server1
       ...

 

[Erel]

You are correct. I've fixed it (note that you can use the same name as the type).