Question

4
Replies
479
Views
 Srikanth J (JSree)
Department of Planning Industry and Environment

Department of Planning Industry and Environment
AU
JSree Member since 2010 21 posts
Department of Planning Industry and Environment
Posted: April 3, 2017
Last activity: April 22, 2017
Posted: 3 Apr 2017 1:05 EDT
Last activity: 22 Apr 2017 23:27 EDT
Closed
Solved

Hiding the Pega version

Is there any ideal way where we can hide the pega version ?

I found a link which suggest to remove the line from error.jsp

https://pdn.pega.com/support-articles/hiding-pega-version-error-page

But this is not usefull in my scenario. so Currentely i have removed the tag from status.jsp

<tr> <td class="StatusHeader">Engine Version</td>
<td><%= sETierVersion %></td>
</tr>

Will there be any ideal way of doing this change.

Enterprise Application Development Dev/Designer Studio System Administration User Experience
Moderation Team has archived post, This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question.
Posted: 4 years ago
Posted: 4 Apr 2017 23:40 EDT
Gurpreet Kaur (Gurpreet_GCS)
PEGA
Principal Technical Solutions Engineer
Pegasystems Inc.
IN

Hi JonnalaS,


Thanks for writing to PSC.


Can you please elaborate more, like from which page you wish to hide the PRPC version, is it designer studio, login page or from error message(as in the screenshot)?


As the PSC link you provided that hides from error message.


Please provide the details to help you.


Thanks:


Gurpreet Kaur
Posted: 4 years ago
Posted: 4 Apr 2017 23:47 EDT
Rincy Rappai (RINCYRAPPAI_GCS)
PEGA
Technical Lead
Pegasystems Inc.
IN

Hello JonnalaS, 


Thanks for posting your query in PSC :)


Could you clarify on where you are intending to hide the pega version? Is it in the error page or in Designer Studio?


Regards,


Rincy
Posted: 4 years ago
Posted: 5 Apr 2017 0:26 EDT
Srikanth J (JSree)
Department of Planning Industry and Environment

Department of Planning Industry and Environment
AU

Hi All,


Thanks for your comments.


During the security testing the team has reported that the software versions are visible on erro pages.


We are trying to hide the pega version on error page. Because on some of the error pages we are seeing the Pega version displayed. PFA Screen shot


 


Thanks,


Srikanth J


 

Accepted Solution

Posted: 4 years ago
Posted: 5 Apr 2017 5:23 EDT
Rincy Rappai (RINCYRAPPAI_GCS)
PEGA
Technical Lead
Pegasystems Inc.
IN

Hello Srikanth, 


Could you refer https://pdn.pega.com/support-articles/security-vulnerability-500-responses-63sp1, here, too it suggests to customise the error.jsp and status.jsp files. Below is the snippet for quick reference:


For further customizing the error screen contents, you can modify two jsp documents which get installed (they are contained within prweb.war), into the deployed application tree under: 
/prweb/diagnostic/error.jsp 
/prweb/diagnostic/status.jsp 


Regards,


Rincy