In the file:
$TOMCAT_HOME/conf/logging.properties

Change:
.handlers = 1catalina.org.apache.juli.FileHandler, java.util.logging.ConsoleHandler

to
.handlers = 1catalina.org.apache.juli.FileHandler

REFERENCES:

class=”robots-noindex”

REFERENCES:

• The manager console
• HTTP compression
• UTF-8 encoding

Steps:

1. tomcat-users.xml – add to bottom:
   
<role rolename="manager-gui"/>
<user username="tomcat" password="s3cr3t" roles="manager-gui"/>


2. server.xml – add compression and URIEncoding, change port if desired:
   
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" compression="on" URIEncoding="UTF-8" />


3. server.xml – relocate webapps by adding ../ to appBase
   
<Host name="localhost" appBase="../webapps"
unpackWARs="true" autoDeploy="true">


4. Restart your server, on Ubuntu use:

   sudo service tomcat7 restart

A single line command and reboot will remove it:

sudo sh -c 'echo "allow-guest=false" >> /etc/lightdm/lightdm.conf'


Similarly “Remote Login” can also be hidden/removed.

sudo sh -c 'echo "greeter-show-remote-login=false" >> /etc/lightdm/lightdm.conf'


These are all easily appended to classes in your CSS files:

• default
• auto
• inherit
• pointer
• crosshair
• text
• help
• move
• progress
• wait
• e-resize
• ne-resize
• n-resize
• nw-resize
• w-resize
• sw-resize
• s-resize
• se-resize

Partial (CSS3) support in current browsers:

• none
• all-scroll
• context-menu
• cell
• vertical-text
• alias
• copy
• no-drop
• not-allowed
• col-resize
• row-resize
• ew-resize
• ns-resize
• nesw-resize
• nwse-resize

NOTE: for very old browser, you can also set several attributes to allow for the supported one to be used.

.example {
cursor:hand;/* IE5-IE5.5 only support (dropped in IE9) */
cursor:pointer; /* IE6 and later */
}


REFERENCES:

REFERENCES:

X-XSS-Protection: 1; mode=block

REFERENCES:

Access-Control-Allow-Origin: *

CORS is a more modern equivalent to JSONP for cross-domain XmlHttpRequests(AJAX) with options to limit domains, subdomains and ports.

Initial browser support:

• Firefox 3.5
• Chrome 4
• Safari 3.2
• MSIE 8

REFERENCES:

If you use flash on your website, I’d suggest adding an appropriate copy of this file to limit your exposure to some potential security issues.

Restricted domains

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*.example.com" />
<allow-access-from domain="example.com" />
</cross-domain-policy>


Open to all domains (not recommended, but fully backward compatible)

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="*"/>
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>


REFERENCES:

WARNING, there are a few considerations to make here…

1. Some browsers displays a blank space in place of the text that uses the font.
2. … and then re-render text in the web font once it has loaded

Method 1: (most compatible, but cross-browser loading behavior varies)

<link href='http://fonts.googleapis.com/css?family=Ubuntu:400,700' rel='stylesheet' type='text/css' />
<style type="text/css">
h1,p { font-family: 'Ubuntu', sans-serif; }
</style>


Method 2: (requires javascript, but is consistent cross-browser)

<script type="text/javascript">
WebFontConfig = {
google: { families: [ 'Ubuntu Mono','Ubuntu' ] }
};
(function() {
var wf = document.createElement('script');
wf.src = ('https:' == document.location.protocol ? 'https' : 'http') + '://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js';
wf.type = 'text/javascript';
wf.async = 'true';
var s = document.getElementsByTagName('script')[0];
s.parentNode.insertBefore(wf, s);
})();
</script>
<style type="text/css">
h1 { font-family: 'Ubuntu Mono','Courier New',monospace; }
p { font-family: 'Ubuntu','sans-serif'; }
</style>