Skip to main content
sukanta
sukanta
Silver ⭐️⭐️⭐️
January 24, 2024
Solved

How to create custom error page for apache nifi

It was observed that our application generates an error message that includes sensitive information about its environment, files, or associated data such as internal system path.

is there a way to put a custome error page in nifi
Banner Disclosure
it was observed that the application is disclosing information about internal components details through response.

MattWho
MattWhoAnswer
Titanium ⭐️⭐️⭐️
March 7, 2024

@sukanta 
This depends on what version of Apache NiFi is being used.
In Apache NiFi 1.12 or newer, there exists the following property in the nifi.properties file for excluding the server version in HTTP responses:

 

nifi.web.should.send.server.version=<true or false>

 

The default is true when not configured.
This capability was added as part of https://issues.apache.org/jira/browse/NIFI-7321

It is best to ask unrelated question in different community questions. Asking multiple question makes it hard for other in the community to understand what question was addressed by the "accepted" solution.

Keep in mind that Apache NiFi is an open source product, so anyone can look at the source code to see what Jetty version(s) are being used.

If you found any of the suggestions/solutions provided helped you with your issue, please take a moment to login and click "Accept as Solution" on one or more of them that helped.

Thank you,
Matt

 

View in thread

9 replies

MattWho
Titanium ⭐️⭐️⭐️
MattWho
Titanium ⭐️⭐️⭐️
January 24, 2024

@sukanta 

I am not completely clear on what you are asking for here.  Can you provide more detail?

What do you mean by "custom error page in NiFi"?
Are you referring to the NiFi bulletin Board?

Only users who are authorized for the component producing the bulletin message woudl be able to view the bulletin text via the component or bulletin board.

Thanks,

Matt

 

Translate
    sukanta
    sukantaAuthor
    Silver ⭐️⭐️⭐️
    February 22, 2024

    Hi Matt,

    Thanks for your reply , Here is what we wanted to achieve

    for one nifi ui we are getting this error

    System Error
    The request contained an invalid host header [10.112.17.35:8443] in the request [/]. Check for request manipulation or third-party intercept.
    Valid host headers are [empty] or:
    127.0.0.1
    127.0.0.1:8443
    localhost
    localhost:8443
    [::1]
    [::1]:8443
    ic-alpha.nifi.tathya.in
    ic-alpha.nifi.tathya.in:8443
    0.0.0.0
    0.0.0.0:8443

    if you see the above error nifi is showing some information about the server
    like ip of the server , port of the nifi etc
    so we do not wanted to show all of these internal information
    is there a way to change this 

    Thanks 
    Sukanta 

    Translate
      MattWho
      Titanium ⭐️⭐️⭐️
      MattWho
      Titanium ⭐️⭐️⭐️
      February 22, 2024

      @sukanta 

      What version of NiFi are you using?

      Where are are you specifically seeing this exception shown (screenshot would be helpful)?

      The exception is related to the URL you are trying to use to access this NiFi.  You are using an IP address that is not present as a SAN entry in the NiFi's keystore PrivateKey entry.  

      Thanks,
      Matt

      Translate
      sukanta
      sukantaAuthor
      Silver ⭐️⭐️⭐️
      February 23, 2024

      Hi Matt,

      We are using nifi 1.15.3

      Yes you are right we are hitting nifi ip address  with the private ip address then only we are seeing this error, where its showing all server information , is there a way to bypass it 

      Translate
        sukanta
        sukantaAuthor
        Silver ⭐️⭐️⭐️
        March 7, 2024

        Waiting for your early reply 

        thanks

        Translate
          Terms & ConditionsAccessibility statement