security hardening config isn't xml formatted

[NottyCode]

The document here mentions 3 bits of server config, but doesn't show it as valid xml. It says:

* Add the `webAppSecurity ssoRequiresSSL="true"` statement to the `server.xml` file.
* Add the `webAppSecurity httpOnlyCookies="true"` statement to the `server.xml` file.
* Add the `httpOptions removeServerHeader="true"` statement to the `server.xml` file.
* Add the `webContainer disableXPoweredBy="true"` statement to the `server.xml` file.

and I think it would be better if it read:

* Add the `<webAppSecurity ssoRequiresSSL="true" />` statement to the `server.xml` file.
* Add the `<webAppSecurity httpOnlyCookies="true" />` statement to the `server.xml` file.
* Add the `<httpOptions removeServerHeader="true" />` statement to the `server.xml` file.
* Add the `<webContainer disableXPoweredBy="true" />` statement to the `server.xml` file.

[dmuelle]

Is there any reason we shouldn't display these as a block to reduce redundancy? ie

Add the following declarations to your server.xml file:

<webAppSecurity ssoRequiresSSL="true" httpOnlyCookies="true />
<httpOptions removeServerHeader="true" />
<webContainer disableXPoweredBy="true" />

[ramkumar-k-9286]

Hi @NottyCode

Suggested changes have been made.

Draft link: https://docs-draft-openlibertyio.mqj6zf7jocq.us-south.codeengine.appdomain.cloud/docs/latest/server-configuration-hardening.html

Please review the same and add the Developer Reviewed label if you are satisfied with the changes.

Regards,
Ramkumar

CC @dmuelle

[NottyCode]

I would expect the text to stop be a bullet point, but it isn't.

[ramkumar-k-9286]

Hi @NottyCode

Corrections were made as per your comment.

Draft link:

Server configuration security hardening

Please review the same and add the Developer Reviewed label if you are satisfied with the changes.

Regards,
Ramkumar

CC @dmuelle

[NottyCode]

LGTM