From: kkolinko Date: Sun, 7 Nov 2010 19:07:45 +0000 (+0000) Subject: Write attribute names in bold. X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=70b9426a46bff5c424605bd9ec831a07f8cc7b47;p=tomcat7.0 Write attribute names in bold. git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1032350 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/webapps/docs/security-howto.xml b/webapps/docs/security-howto.xml index e32e8cd03..733fad853 100644 --- a/webapps/docs/security-howto.xml +++ b/webapps/docs/security-howto.xml @@ -216,7 +216,7 @@

Any administrative application should be protected by a RemoteAddressValve. (Note that this Valve is also available as a Filter.) - The allow attribute should be used to limit access to a set of known + The allow attribute should be used to limit access to a set of known trusted hosts.

The default ErrorReportValve includes the Tomcat version number in the @@ -261,7 +261,7 @@ server.info=Apache Tomcat/7.0.x

The manager component is used to generate session IDs.

-

The default entropy value has been shown to generate predictable values +

The default entropy value has been shown to generate predictable values under certain conditions. For more secure session generation, this should be set to a long string. This is done automatically if the APR/native library is installed; a random value will be obtained from the APR/native