Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

4
Replies
625
Views
J Srikanth Member since 2010 22 posts
Common Wealth Bank
Posted: Apr 3, 2017
Last activity: Apr 22, 2017
Closed
Solved

Hiding the Pega version

Is there any ideal way where we can hide the pega version ?

I found a link which suggest to remove the line from error.jsp

https://community.pega.com/support/support-articles/hiding-pega-version-error-page

But this is not usefull in my scenario. so Currentely i have removed the tag from status.jsp

<tr> <td class="StatusHeader">Engine Version</td>
<td><%= sETierVersion %></td>
</tr>

Will there be any ideal way of doing this change.

To see attachments, please log in.
Dev/Designer Studio
System Administration
User Experience

Accepted Solution

Posted: 7 years ago

Hello Srikanth, 

Could you refer https://community.pega.com/support/support-articles/security-vulnerability-500-responses-63sp1, here, too it suggests to customise the error.jsp and status.jsp files. Below is the snippet for quick reference:

For further customizing the error screen contents, you can modify two jsp documents which get installed (they are contained within prweb.war), into the deployed application tree under: 
/prweb/diagnostic/error.jsp 
/prweb/diagnostic/status.jsp 

Regards,

Rincy

 

To see attachments, please log in.
Posted: 7 years ago

Hi JonnalaS,

Thanks for writing to PSC.

Can you please elaborate more, like from which page you wish to hide the PRPC version, is it designer studio, login page or from error message(as in the screenshot)?

As the PSC link you provided that hides from error message.

Please provide the details to help you.

Thanks:

Gurpreet Kaur

To see attachments, please log in.
Posted: 7 years ago

Hi All,

Thanks for your comments.

During the security testing the team has reported that the software versions are visible on erro pages.

We are trying to hide the pega version on error page. Because on some of the error pages we are seeing the Pega version displayed. PFA Screen shot

 

Thanks,

Srikanth J

 

To see attachments, please log in.

Accepted Solution

Posted: 7 years ago

Hello Srikanth, 

Could you refer https://community.pega.com/support/support-articles/security-vulnerability-500-responses-63sp1, here, too it suggests to customise the error.jsp and status.jsp files. Below is the snippet for quick reference:

For further customizing the error screen contents, you can modify two jsp documents which get installed (they are contained within prweb.war), into the deployed application tree under: 
/prweb/diagnostic/error.jsp 
/prweb/diagnostic/status.jsp 

Regards,

Rincy

 

To see attachments, please log in.

Related content:

Related content has not currently been identified for this post.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice