Question
Common Wealth Bank
AU
Last activity: 22 Apr 2017 23:27 EDT
Hiding the Pega version
Is there any ideal way where we can hide the pega version ?
I found a link which suggest to remove the line from error.jsp
https://community.pega.com/support/support-articles/hiding-pega-version-error-page
But this is not usefull in my scenario. so Currentely i have removed the tag from status.jsp
<tr> <td class="StatusHeader">Engine Version</td>
<td><%= sETierVersion %></td>
</tr>
Will there be any ideal way of doing this change.
Accepted Solution
Pegasystems Inc.
IN
Hello Srikanth,
Could you refer https://community.pega.com/support/support-articles/security-vulnerability-500-responses-63sp1, here, too it suggests to customise the error.jsp and status.jsp files. Below is the snippet for quick reference:
For further customizing the error screen contents, you can modify two jsp documents which get installed (they are contained within prweb.war), into the deployed application tree under:
/prweb/diagnostic/error.jsp
/prweb/diagnostic/status.jsp
Regards,
Rincy
Pegasystems Inc.
IN
Hi JonnalaS,
Thanks for writing to PSC.
Can you please elaborate more, like from which page you wish to hide the PRPC version, is it designer studio, login page or from error message(as in the screenshot)?
As the PSC link you provided that hides from error message.
Please provide the details to help you.
Thanks:
Gurpreet Kaur
Pegasystems Inc.
IN
Hello JonnalaS,
Thanks for posting your query in PSC :)
Could you clarify on where you are intending to hide the pega version? Is it in the error page or in Designer Studio?
Regards,
Rincy
Common Wealth Bank
AU
Hi All,
Thanks for your comments.
During the security testing the team has reported that the software versions are visible on erro pages.
We are trying to hide the pega version on error page. Because on some of the error pages we are seeing the Pega version displayed. PFA Screen shot
Thanks,
Srikanth J
Accepted Solution
Pegasystems Inc.
IN
Hello Srikanth,
Could you refer https://community.pega.com/support/support-articles/security-vulnerability-500-responses-63sp1, here, too it suggests to customise the error.jsp and status.jsp files. Below is the snippet for quick reference:
For further customizing the error screen contents, you can modify two jsp documents which get installed (they are contained within prweb.war), into the deployed application tree under:
/prweb/diagnostic/error.jsp
/prweb/diagnostic/status.jsp
Regards,
Rincy