[FELIX-4983] To prevent server information disclosure on error page, jetty 9.3.2 should be used

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: http.jetty-3.0.2
• Fix Version/s: http.jetty-3.2.0
• Component/s: HTTP Service
• Assignee: Carsten Ziegeler
• Reporter: Adrien PAILHES
• Created: 30/Jul/15 16:58
• Updated: 01/Apr/16 07:41
• Resolved: 07/Jan/16 08:00

Description

According to this commit:
https://github.com/eclipse/jetty.project/commit/6428718962b26ece54736da897ac9755eda265e2
jetty information is no more used in ErrorHandler (aka Jetty.POWERED_BY_HTML is removed).

So, for security purpose(information disclosure threat), it would be usefull to use jetty 9.3.2.