From 70b9426a46bff5c424605bd9ec831a07f8cc7b47 Mon Sep 17 00:00:00 2001 From: kkolinko Date: Sun, 7 Nov 2010 19:07:45 +0000 Subject: [PATCH] Write attribute names in bold. git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1032350 13f79535-47bb-0310-9956-ffa450edef68 --- webapps/docs/security-howto.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/webapps/docs/security-howto.xml b/webapps/docs/security-howto.xml index e32e8cd03..733fad853 100644 --- a/webapps/docs/security-howto.xml +++ b/webapps/docs/security-howto.xml @@ -216,7 +216,7 @@

Any administrative application should be protected by a RemoteAddressValve. (Note that this Valve is also available as a Filter.) - The allow attribute should be used to limit access to a set of known + The allow attribute should be used to limit access to a set of known trusted hosts.

The default ErrorReportValve includes the Tomcat version number in the @@ -261,7 +261,7 @@ server.info=Apache Tomcat/7.0.x

The manager component is used to generate session IDs.

-

The default entropy value has been shown to generate predictable values +

The default entropy value has been shown to generate predictable values under certain conditions. For more secure session generation, this should be set to a long string. This is done automatically if the APR/native library is installed; a random value will be obtained from the APR/native -- 2.11.0