(1) Tomcat禁用Put等不安全方法。
1
<
security-constraint
>
2
<
web-resource-collection
>
3
<
web-resource-name
>
xxxx-Security-Constraint-0
</
web-resource-name
>
4
<
url-pattern
>
/*
</
url-pattern
>
5
<
http-method
>
PUT
</
http-method
>
6
<
http-method
>
DELETE
</
http-method
>
7
<
http-method
>
HEAD
</
http-method
>
8
<
http-method
>
OPTIONS
</
http-method
>
9
<
http-method
>
TRACE
</
http-method
>
10
</
web-resource-collection
>
11
<
auth-constraint
>
12
</
auth-constraint
>
13
</
security-constraint
>
参考文档： http://yingfangming.blog.163.com/blog/static/165802470201291622853362/
(2) 常见错误页面定向
1
<
error-page
>
2
<
error-code
>
404
</
error-code
>
3
<
location
>
/error.jsp
</
location
>
4
</
error-page
>
5
<
error-page
>
6
<
error-code
>
500
</
error-code
>
7
<
location
>
/error.jsp
</
location
>
8
</
error-page
>
9
如果只是这样配置IE浏览器不会重定向，error.jsp里面要写上下面代码，把response的header status code置为200.
<%
response.setStatus(
200
);
%>
参考文档： http://origin100.iteye.com/blog/383460 也可以设置按照异常定向。
（3）网站图标
更换ico图标文件。
