Hide Tomcat version in error messages

[randomorder]

On errors, tomcat shows the server version by default at the bottom of the error report page

Which is not ideal from a security standpoint. This information could be used to look for known exploits by attackers.

[randomorder]

One way to disable the version number report is by changing the server.xml file
https://docs.rocketsoftware.com/bundle/mobius_ig_123/page/sup1694713740938.html

<Valve className="org.apache.catalina.valves.ErrorReportValve" showReport="false" showServerInfo="false"/>

[randomorder]

Check what we are doind for CORS https://github.com/geosolutions-it/docker-geoserver/blob/master/entrypoint.sh . We could apply a similar replacement to the server.xml file

[randomorder]

thanks