The default error report valve "org.apache.catalina.valves.ErrorReportValve" shows stack trace and version information which is not suitable for production use. However, it's unable to be overridable in EAP 6. We can configure a valve setting in jboss-web.xml inside each web application but the problem here is that setting the valve in the jboss-web.xml is not actually replacing the default ErrorReportValve. Instead, it is leaving the default ErrorReportValve first in the valve pipeline and then placing the custom error valve later in the valve pipeline. Also, though global valve was introduced since EAP 6.1, it's also does not work in order to override the default error report valve. Please provide a feature to override the default error report valve like "errorReportValveClass" setting in the previous EAP 4.x/5.x.
This looks like a RFE. qa_nacking for CP stream.