Preventing directory listings in WebApplication
Hi How exactly do I stop the user going into directory containing jsps and listing all the jsps within it as a directory listing. I dont mind them specifying a particular jsp and going straight to that but I would / to map to the default page for the particular some section. i.e myapp/section1 i want go to myapp/section1/start.jsp myapp/section2 i want go to myapp/section2/start.jsp I guess its something to do with mappings the applications in web.xml but I cant get it working. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Preventing directory listings in WebApplication
There are two ways to do that: 1. Turn off the directory listing in one of the configuration file. But I cannot remember which one off the top of my head. 2. Put an index.jsp with a generic message in each folder. Hope this helps. - Original Message - From: Paul Taylor [EMAIL PROTECTED] To: Tomcat Users List tomcat-user@jakarta.apache.org Sent: Monday, January 10, 2005 08:21 AM Subject: Preventing directory listings in WebApplication Hi How exactly do I stop the user going into directory containing jsps and listing all the jsps within it as a directory listing. I dont mind them specifying a particular jsp and going straight to that but I would / to map to the default page for the particular some section. i.e myapp/section1 i want go to myapp/section1/start.jsp myapp/section2 i want go to myapp/section2/start.jsp I guess its something to do with mappings the applications in web.xml but I cant get it working. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Preventing directory listings in WebApplication
Just before the error page listings in your application's web.xml file. 4305 4306 welcome-file-list id=WelcomeFileList_1 4307 welcome-fileindex.html/welcome-file 4308 welcome-fileindex.jsp/welcome-file 4308 welcome-filestart.jsp/welcome-file - 4309/welcome-file-list 4310 !-- On Mon, 2005-01-10 at 11:03, Paul Taylor wrote: Hi Are these exclusive options. I can disable the listings but cant get the default pages to work Should the default pages go in the applications web.xml or Tomcats main web.xml Ben Souther wrote: You can add start.jsp to your welcome file list or you can set listings to false in the the default servlet entry of TOMCAT_HOME/conf/web.xml On Mon, 2005-01-10 at 09:21, Paul Taylor wrote: Hi How exactly do I stop the user going into directory containing jsps and listing all the jsps within it as a directory listing. I dont mind them specifying a particular jsp and going straight to that but I would / to map to the default page for the particular some section. i.e myapp/section1 i want go to myapp/section1/start.jsp myapp/section2 i want go to myapp/section2/start.jsp I guess its something to do with mappings the applications in web.xml but I cant get it working. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Preventing directory listings in WebApplication
Ok Ive realised what I was doing wrong I was listing a file on each directory as follows welcome-file-list id=WelcomeFileList_1 welcome-filesection1/start.jsp/welcome-file welcome-filesection2/start.jsp/welcome-file /welcome-file-list when i just needed to specify the file Also you can use it in conjunction with listing =false which I need because some directories do not have a suitable default. Ben Souther wrote: Just before the error page listings in your application's web.xml file. 4305 4306 welcome-file-list id=WelcomeFileList_1 4307 welcome-fileindex.html/welcome-file 4308 welcome-fileindex.jsp/welcome-file 4308 welcome-filestart.jsp/welcome-file - 4309/welcome-file-list 4310 !-- On Mon, 2005-01-10 at 11:03, Paul Taylor wrote: Hi Are these exclusive options. I can disable the listings but cant get the default pages to work Should the default pages go in the applications web.xml or Tomcats main web.xml Ben Souther wrote: You can add start.jsp to your welcome file list or you can set listings to false in the the default servlet entry of TOMCAT_HOME/conf/web.xml On Mon, 2005-01-10 at 09:21, Paul Taylor wrote: Hi How exactly do I stop the user going into directory containing jsps and listing all the jsps within it as a directory listing. I dont mind them specifying a particular jsp and going straight to that but I would / to map to the default page for the particular some section. i.e myapp/section1 i want go to myapp/section1/start.jsp myapp/section2 i want go to myapp/section2/start.jsp I guess its something to do with mappings the applications in web.xml but I cant get it working. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
preventing directory listings
Hi, I am using tomcat 3.3.1a. Now when i type sin the url http://localhost:8080/ http://localhost:8080/ I can see the directory listing. Is there any way to prevent this. Could you please let me know about this if there is a way. Thanks and Regards Denver Saldanha
RE: preventing directory listings
In the web.xml under the conf directory, change the listings parameter to false for the default servlet. This is for 4.1.27, don't know if the same applies to 3.3.1a servlet servlet-namedefault/servlet-name servlet-class org.apache.catalina.servlets.DefaultServlet /servlet-class init-param param-namedebug/param-name param-value0/param-value /init-param init-param param-namelistings/param-name param-valuefalse/param-value /init-param load-on-startup1/load-on-startup /servlet -Original Message- From: Denver J. Saldanha [mailto:[EMAIL PROTECTED] Sent: Monday, October 06, 2003 1:29 AM To: [EMAIL PROTECTED] Subject: preventing directory listings Hi, I am using tomcat 3.3.1a. Now when i type sin the url http://localhost:8080/ http://localhost:8080/ I can see the directory listing. Is there any way to prevent this. Could you please let me know about this if there is a way. Thanks and Regards Denver Saldanha - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]